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(57) A data communication system Includes a plu- 
rality of network and a plurality of terminal being acces- 
sible to the plurality of network. Each of the plurality of 
network is assigned with each network property value. 
Each of the plurality of terminal further includes : at least 
an access policy for making a decision on pemnissibility 
for access to other terminal of the plurality of temninal 
than the each terminal, with reference to at least one of 
a first network property value assigned to a first network 
connected with the each tenninal and a second network 
property value assigned to a second network connected 
with the other terminal, so that only when the access is 
permitted based on the access policy, then the tenninal 
makes an access to the other temninal. 
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Description 

[0001] The present invention reiates to a data com- 
munication system and a data communication temiinal 
as well as a data communication method used by utiliz- 
ing the system and terminal and a computer program 
executed to implement the method, and more particu- 
larly to a data communication system with a high mobil- 
ity such as a mobile communication system for allowing 
a mobile temninal to change in network connection to 
plural available communication networks upon moving 
by taking into account respective inter-relationship be- 
tween transmitting/receiving data and connected one of 
the plural available communication networks for estab- 
lishing a highly secure data communication even when 
the network connection of the mobile terminal Is 
changed among the plural available communication net- 
works. 

[0002] All of patents, patent applications, patent pub- 
lications, scientific articles and the like, which will here- 
inafter be cited or Identified in the present application, 
will, hereby, be incorporated by references in their en- 
tirety In order to describe more fully the state of the art, 
to which the present invention pertains. 
[0003] In the prior art, the data communication termi- 
nal stores a property in addition to data for communica- 
tion. The property may In general not include any infor- 
mation involved in a network. The communication data 
are transmitted through the network and received by the 
data communication terminal, wherein the received 
communication data are stored in the data communica- 
tion terminal. Those received communication data are 
not distinctive nor distinguishable from other data gen- 
erated by the data communication terminal or received 
through other communication network. Namely, the data 
stored In the data communication terminal are free of 
any Identifier which identify one of data-obtaining meas- 
ures such as the terminal Itself, or the networks. 
[0004] In recent years, potable data communication 
terminals and potable telecommunication temilnals with 
data communication function have widely been spread. 
Wireless local area networks have been equipped in 
home and office. There is a plan to offer public wireless 
access services. 

[0005] In the above circumstances, it will be expected 
or desired that the wireless data communication termi- 
nal is capable of automatically establishing continuous 
data communications even when an accessible or con- 
nectable communication network is changed upon 
move of the wireless data communication tenninal. 
[0006] In the prior art, the data obtained via a network 
does not Include nor accompanying any additional in- 
formation Involved In this network. Security data ob- 
tained via an office network may be opened or leaked 
by user's careless mistake in establishing a connection 
to an unreliable public line or network. The data com- 
munication tenninal may be invaded by a virus program 
through an unreliable public line or network. The com- 



munication network may be exposed to such avirus pro- 
gram. 

[0007] In the above circumstances, the development 
of a novel data communication system free from the 
5 above problems Is desirable. 

[0008] Accordingly, it is an object of the present inven- 
tion to provide a novel data communication system free 
from the above problems. 

[0009] It Is a further object of the present invention to 
provide a novel data communication system for estab- 
lishing a highly secure data communication. 
[0010] It is a still further object of the present invention 
to provide a novel data communication system for al- 
lowing a mobile terminal to change in network connec- 
tion to plural available communication networks upon 
moving by taking into account respective inter- relation- 
ship between transmitting/receiving data and connected 
one of the plural available communication networks for 
establishing a highly secure data communication even 
when the network connection of the mobile terminal is 
changed among the plural available communication net- 
works. 

[001 1 ] It is yet a further object of the present invention 
to provide a novel data communication temninal free 
from the above problems. 

[0012] It is further more object of the present invention 
to provide a novel data communication terminal for es- 
tablishing a highly secure data communication. 
[0013] It is still further more object of the present in- 
vention to provide a novel data communication terminal 
for allowing a mobile tenninal to change in network con- 
nection to plural available communication networks up- 
on moving by taking Into account respective inter-rela- 
tionship between transmitting/receiving data and con- 
nected one of the plural available communication net- 
works for establishing a highly secure data communica- 
tion even when the network connection of the mobile 
tenninal is changed among the plural available commu- 
nication networks. 

[001 4] It is another object of the present invention to 
provide a novel data communication method free from 
the above problems. 

[001 5] It Is further another object of the present inven- 
tion to provide a novel data communication method for 
establishing a highly secure data communication. 
[0016] It is still further another object of the present 
invention to provide a novel data communication meth- 
od for allowing a mobile temninal to change in network 
connection to plural available communication networks 
upon moving by taking into account respective inter-re- 
lationship between transmitting/receiving data and con- 
nected one of the plural available communication net- 
works for establishing a highly secure data communica- 
tion even when the network connection of the mobile 
terminal is changed among the plural available commu- 
nication networks. 

[0017] It is an additional object of the present inven- 
tion to provide a novel computer-program to be execut- 
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ed for implementing data communication method free 
from the above problems. 

[0018] It Is a further additional object of the present 
invention to provide a novel computer-program to be ex- 
ecuted for implementing data communication method s 
for establishing a highly secure data communication. 
[0019] It Is a still further additional object of the 
present invention to provide a novel computer-program 
to be executed for Implementing data communication 
method for allowing a mobile terminal to change in net- 
work connection to plural available communication net- 
works upon moving by taking into account respective 
inter-relatlonship between transmitting/receiving data 
and connected one of the plural available communica- 
tion networks for establishing a highly secure data com- 
munication even when the network connection of the 
mobile tennlnai Is changed among the plural available 
communication networks. 

[0020] The present invention provides a data commu- 
nication system including : a plurality of network ; and a 
plurality of terminal being accessible to the plurality of 
network. Each of the plurality of network is assigned with 
each network property value. Each of the plurality of ter- 
minal further includes : at least an access policy for mak- 
ing a decision on permissibility for access to other ter- 
minal of the plurality of tenninal than the each terminal, 
with reference to at least one of a first network property 
value assigned to a first network connected with the 
each tenninal and a second network property value as- 
signed to a second network connected with the other 
terminal, so that only when the access is pennitted 
based on tlie access policy, then the tenninal makes an 
access to the other terminal. 

[0021 ] The above and other objects, features and ad- 
vantages of the present invention will be apparent from 
the following descriptions. 

[0022] Preferred embodiments according to the 
present Invention will be described In detail with refer- 
ence to the accompanying drawings. 
[0023] FIG. 1 is a block diagram of a data communi- 
cation system in a first embodiment in accordance with 
the present Invention. 

[0024] FIG. 2 Is a block diagram of an internal struc- 
ture of each of the fourth data communication tenninals 
included in the system of FIG. 1 . 
[0025] FIG. 3 is a block diagram of typical examples 
of data structure to be stored in the data storage region 
In the data communication tenninal of FIG. 2. 
[0026] FIG. 4 is a diagram of one typical example of 
the transmission policy stored in the access policy stor- 
age unit included In the data communication tenninal of 
FIG. 2. 

[0027] Fl G. 5 is a flow chart Illustrative of a typical ex- 
ample of processes or operations shown by the data 
transmission permission decision function block includ- 
ed In the data communication terminal of FIG. 2. 
[0028] FIG. 6 is a diagram of one typical example of 
transmission packet to be transmitted onto the data 



communication network by the packet transmission 
function block included in the data communication ter- 
minal of FIG. 2. 

[0029] FIG. 7 is a block diagram of an Internal struc- 
ture of the data communication tenninal of the second 
embodiment in accordance with the present invention. 
[0030] FIG. 8 is a flow chart of operations or process- 
es of the network property value addition function block 
included In the data communication terminal of FIG. 7. 
[0031] FIG. 9 Is a block diagram of an internal struc- 
ture of the data communication terminal of the third em- 
bodiment In accordance with the present invention. 
[0032] FIG. 1 CIS a diagram of one typical example of 
the receiving policy stored in the access policy storage 
unit included in the data communication terminal of FIG, 
9. 

[0033] FIG. 11 is a flow chart Illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block Included In 
the data communication tenninal of FIG. 9. 
[0034] FIG. 1 2 Is a block diagram of an internal stnjc- 
ture of the data communication terminal of the fourth 
embodiment in accordance with the present invention. 
[0035] FIG. 13 is a flow chart of operations or proc- 
esses of the network property value changing function 
block Included in the data communication tenninal of 
FIG. 12. 

[0036] FIG. 1 4 is a block diagram of an internal struc- 
ture of the data communication tenninal of the fifth em- 
bodiment in accordance with the present invention. 
[0037] FIG. 15 is a flow chart of operations or proc- 
esses of the access policy changing function block In- 
cluded In the data communication tenninal of FIG. 14. 
[0038] FIG . 1 6 Is a block diagram of an internal struc- 
ture of the data communication terminal of the sixth em- 
bodiment in accordance with the present invention. 
[0039] FIG. 1 7 is a block diagram of an Internal stmc- 
ture of one of the data storage regions included in the 
data communication tenninal of FIG. 16. 
[0040] FIG. 18 is a flow chart of operations or proc- 
esses of the network property value addition function 
block Included In the data communication tenninal of 
FIG. 16. 

[0041] FIG. 1 9 is a diagram of one typical example of 
the transmission policy stored in the access policy stor- 
age unit included in the data communication terminal of 
FIG. 16. 

[0042] FIG. 20 Is a flow chart Illustrative of a typical 
example of processes or operations shown by the data 
transmission permission decision function block includ- 
ed in the data communication tenninal of FIG. 16. 
[0043] FIG. 21 is a block diagram of an Internal struc- 
ture of the data communication terminal of the seventh 
embodiment in accordance with the present Invention. 
[0044] FIG. 22 is a diagram of one typical example of 
the transmission policy stored in the access policy stor- 
age unit Included in the data communication terminal of 
FIG. 21. 
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[0045] FIG. 23 Is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication terminal of FIG. 21 . 
[0046] FIG. 24 Is a block diagram of an internal struc- 
ture of the data communication tenninal of the eighth 
embodiment In accordance with the present Invention. 
[0047] FIG. 25 Is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication terminal of FIG. 24. 
[0048] FIG. 26 is a block diagram of an Internal struc- 
ture of the data communication terminal of the ninth em- 
bodiment in accordance with the present invention. 
[0049] FIG. 27 is a flow chart of operations or proc- 
esses of the network property value changing function 
block included In the data communication terminal of 
FIG. 26. 

[0050] FIG. 28 is a block diagram of an internal struc- 
ture of the data communication terminal of the tenth em- 
bodiment in accordance with the present invention. 
[0051] FIG. 29 is a flow chart of operations or proc- 
esses of the access policy changing function block In- 
cluded in the data communication terminal of FIG. 28. 
[0052] FIG. 30 is a block diagram of an Interna! struc- 
ture of the data communication tenninal of the eleventh 
embodiment in accordance with the present invention. 
[0053] FIG. 31 Is a flow chart of processes or opera- 
tions shown by the data transmission pennission deci- 
sion function block of the data communication terminal 
of FIG. 30. 

[0054] FIG. 32 is a block diagram of an internal struc- 
ture of the data communication tenninal of the twelfth 
embodiment in accordance with the present Invention. 
[0055] FIG. 33 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication terminal of FIG. 32. 
[0056] FIG. 34 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included In 
the data communication terminal of FIG. 24. 
[0057] FIG. 35 Is a block diagram of an Intemal struc- 
ture of the data communication tenninal of the four- 
teenth embodiment in accordance with the present In- 
vention. 

[0058] FIG. 36 is a flow chart of operations of the data 
transmission permission decision function block Includ- 
ed In the data communication terminal of FIG. 35. 
[0059] FIG. 37 is a block diagram of an Internal struc- 
ture of the data communication terminal of the fifteenth 
embodiment In accordance with the present invention. 
[0060] FIG. 38 Is a flow chart of operations of the data 
transmission pemnission decision function block includ- 
ed in the data communication terminal of FIG. 37. 
[0061] FIG. 39 Is a block diagram of an internal struc- 
ture of the data communication terminal of the sixteenth 
embodiment In accordance with the present Invention. 



[0062] FIG. 40 Is a flow chart of operations or proc- 
esses of the data transmission pennission decision op- 
eration inhibiting function block included in the data 
communication terminal of FIG. 39. 
5 [0063] FIG. 41 Is a flow chart of operations of the data 
transmission permission decision function block includ- 
ed in the data communication tenninal of FIG. 2. 
[0064] FIG. 42 isadlagramof a structure of the trans- 
mission data packet free of the network property value 
involved in step S209 of FIG. 41 . 
[0065] FIG. 43 Is a diagram of a typical example of the 
hierarchical network structure involved in the network 
property values In the twentieth embodiment In accord- 
ance with the present invention. 
[0066] FIG. 44 is a diagram of a typical example of a 
transmission policy suitable for the hierarchical network 
structure of FIG. 43. 

[0067] FIG . 45 Is a block diagram of a data communi- 
cation system in a twenty second embodiment in ac- 
cordance with the present Invention. 
[0068] FIG. 46 is a block diagram of an internal stmc- 
ture of the data communication tenninal of the twenty 
second embodiment in accordance with the present in- 
vention. 

[0069] FIG. 47 is a diagram of a typical example of 
contents registered on the network property value table 
included In the data communication terminal of FIG. 46. 
[0070] FIG. 48 Is a flow chart of operations of the data 
transmission permission decision function block includ- 
ed in the data communication tenninal of FIG. 46 
[0071] FIG. 49 Is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication tenninal of FIG. 46. 
[0072] A first aspect of the present Invention is a data 
communication system including : a plurality of 
network ; and a plurality of tenninal being accessible to 
the plurality of network. Each of the plurality of network 
Is assigned with each network property value. Each of 
the plurality of terminal further includes : at least an ac- 
cess policy for making a decision on permissibility for 
access to other terminal of the plurality of terminal than 
the each terminal, with reference to at least one of a first 
network property value assigned to a first network con- 
nected with the each terminal and a second network 
property value assigned to a second network con nected 
with the other tenninal, so that only when the access is 
permitted based on the access policy, then the tenninal 
makes an access to the other tenninal, 
[0073] The first and second network property values 
may be either identical with or different each other, and 
the first and second networks are also either identical 
with or different each other. 

[0074] The access policy may typically include at least 
a transmission policy for making a decision on permis- 
sibility for data transmission to the other tenninal, with 
reference to at least one of the first and second network 
property values, so that only when the datatransmisslon 
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is permitted based on the transmission policy, then the 
terminal makes the data transmission to the other ter- 
minal, 

[0075] The terminal may advantageously be adjusted 
that a data-accompanying network property value is 
added to data entered by user before the data accom- 
panied with the data-accompanying network value are 
stored In at least a data storage region of the terminal, 
to make the decision on permissibility for data transmis- 
sion based on the transmission policy with reference to 
the first and second network property values and the da- 
ta-accompanying network property value, so that only 
when the data transmission is permitted based on the 
transmission policy, then the terminal makes a transmis- 
sion of the data accompanied with the data-accompa- 
nying network property value to the other terniinai. 
[0076] The terminal may advantageously be adjusted 
to allow user to set the data-accompanying network 
property value to be added to the entered data every 
time when the entered data are stored in the data stor- 
age region. 

[0077] The terminal may advantageously be adjusted 
to set and change the data-accompanying network 

property value stored in the data storage region. 
[0078] The tenninal may advantageously be adjusted 
to change the access policy. 

[0079] The access policy may advantageously further 
include, in addition to the transmission policy, at least a 
receiving policy for making a decision on pemnissibility 
for data receiving from the other terniinal, with reference 
to at least one of the first and second network property 
values, so that only when the data receiving is permitted 
based on the receiving policy, then the terminal makes 
the data receiving from the other terminal. 
[0080] The tenninal may advantageously be adjusted 
that a data-accompanying network property value is 
added to data entered by user before the data accom- 
panied with the data-accompanying network property 
value are stored in at least a data storage region of the 
terminal, to make the decision on permissibility for at 
least one of data transmission and data receiving, based 
on at least one of the transmission policy and the recelv- 
ing policy, with reference to the first and second network 
property values and the data-accompanying network 
property value, so that only when the data transmission 
is permitted based on the transmission policy, then the 
terminal makes a transmission of the data accompanied 
with the data-accompanying network property value to 
the other terminal, as well as only when the data receiv- 
ing Is permitted based on the receiving policy, then the 
terminal makes a receipt of the data accompanied with 
the data-accompanying network property value from the 
other terminal. 

[0081] The tenninal may advantageously be adjusted 
to allow an user's instruction to set the data-accompa- 
nying network property value to be added to the entered 
data every time when the entered data are stored in the 
data storage region. 



[0082] The terminal may advantageously be adjusted 
to set and change the data-accompanying network 
property value stored In the data storage region. 
[0083] The terminal may advantageously be adjusted 

5 to change the receiving policy. 

[0084] The data storage region may advantageously 
comprise a plurality of data storage region, each of 
which is assigned with a storage-region-accompanying 
network property value, to make the decision on permis- 

10 sibiiity for data transmission based on the transmission 
policy with reference to the first and second network 
property values and the storage-region-accompanying 
network property value, so that only when the data 
transmission is permitted based on the transmission 

15 policy, then the terminal makes a transmission of the da- 
ta accompanied with the storage-region-accompanying 
network property value to the other terminal. 
[0085] The terminal may advantageously be adjusted 
to set and change the storage-region-accompanying 

20 network property value stored in the data storage re- 
gion. 

[0086] The terminal may advantageously be adjusted 

to change the transmission policy. 

[0087] The data storage region may advantageously 

25 comprise a plurality of data storage region, each of 
which is assigned with a storage-region-accompanying 
network property value, to make the decision on permis- 
sibility for at least one of data transmission and data re- 
ceiving, based on at least one of the transmission policy 

30 and the receiving policy, with reference to the first and 
second network property values and the storage-region- 
accompanying network property value, so that only 
when the data transmission is permitted based on the 
transmission policy, then the terminal makes atransmis- 

S5 sion of the data accompanied with the storage-region- 
accompanying network property value to the other ter- 
minal, as well as only when the data receiving is permit- 
ted based on the receiving policy, then the terminal 
makes a receipt of the data from the other terminal. 

40 [0088] The terminal may advantageously be adjusted 
to set and change the storage-region-accompanying 
network property value stored in each of the plurality of 
data storage region. 

[0089] The termin al may advantageously be adjusted 

45 to change the receiving policy. 

[0090] The terminal may advantageously be adjusted 
that one of the plurality of datastorage region is selected 
in accordance with an user's designation for allowing the 
selected one of the plurality of data storage region to 

50 store the received data. 

[0091] The terminal may advantageously be adjusted 
to infomri user that the data receiving Is not pemnitted 
based on the receiving policy. 

[0092] The terminal may advantageously be adjusted 
55 to infonn user that the data receiving is not pennitted 
based on the receiving policy. 

[0093] The terminal may advantageously be adjusted 
that if the data receiving is not pennitted based on the 
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receiving policy, then the decision on pemiissibility of 
data receiving is made in accordance with an user's in- 
struction. 

[0094] The tennlnal may advantageously be adjusted 
that If the data receiving is not permitted based on the 
receiving policy, then the decision on pemnlssibillty of 
data receiving Is made in accordance with an user's in- 
struction. 

[0095] The terminal may advantageously be adjusted 
that if the user's instruction is to pemnlt storing the re- 
ceived data, then a temporary pemnission for receiving 
data Is added to the receiving policy in a predetermined 
time period. 

[0096] The tenninal may advantageously be adjusted 
that if the data receiving is permitted based on the re- 
ceiving policy but the plurality of data storage region 
does not Include any data storage region assigned with 
the same network property value as a network property 
value added to the received data, then a decision on 
permissibility for storing the received data into any one 
of the plurality of data storage region is made In accord- 
ance with an user's Instruction. 
[0097] If the user's Instruction is to permit storing the 
received data, then a selection of one of the plurality of 
data storing regions for storing the received data may 
advantageously be made In accordance with an user's 
Instruction. 

[0098] The tenninal may advantageously be adjusted 

that if the user's instruction is to pennit storing the re- 
ceived data, then a temporary pemnission for receiving 
data Is added to the receiving policy In a predetermined 
time period. 

[0099] The temfilnal may advantageously be adjusted 
to Inform user that the data transmission Is not permitted 
based on the transmission policy. 
[01 00] The terminal may advantageously be adjusted 
that If the data transmission Is not pemiltted based on 
the transmission policy, then the decision on pemrilssi- 
bility of data transmission is made in accordance with 
an user's Instruction. 

[0101] The terminal may advantageously be adjusted 
that If the user's instruction is to pemnit transmitting the 
data, then a temporary permission for transmitting data 
is added to the transmission policy In a predetermined 
time period. 

[01 02] The tenninal may advantageously be adjusted 
to allow an entered user's instruction to make invalid the 
decision on pennlsslbirity for access based on the ac- 
cess policy. 

[0103] The terminal may advantageously be adjusted 
that if the each tenninal Is connected to a network as- 
signed with the same network property value as of the 
other terminal, then the data only are transmitted to the 
other terminal without being accompanied the data-ac- 
companying network property value. 
[0104] The network property value may advanta- 
geously Include identifiers which Identify a private net- 
wori< and a public network respectively. 



[0105] The network property value may advanta- 
geously include identifiers which identify different organ- 
izations respectively. 

[0106] The network property value may advanta- 
5 geously include Identifiers which identify respective 
node points Included in a hierarchical networi< structure. 
[0107] The network property value may advanta- 
geously Include identifiers which do not identify any net- 
work. 

10 [0108] Each of the plurality of network may advanta- 
geously be assigned with each network identifier which 
uniquely identifies the each network, and the each ter- 
minal may advantageously be adjusted to specify the 
other tenninal, to which the each terminal makes an ac- 

15 cess, based on a terminal address which includes the 
each network identifier. 

[01 09] The terminal may advantageously be adjusted 
to hold respective correspondence between the each 
network Identifier and the each network property value 

20 assigned to a network which is also assigned to the each 
network Identifier for obtaining a network Identifier as- 
signed to a network connected to the other terminal, to 
which the each tenninal makes an access, based on a 
terminal address of the other tenninal, to specify a cor- 

25 responding network property value to the obtained net- 
work identifier. 

[0110] The temnlnal may advantageously Include at 
least one file system which provides an additional data 
storage region. 
30 [0111] The tenninal may advantageously include at 
least one hard disk which provides an additional data 
storage region. 

[0112] A second aspect of the present invention Is a 
terminal accessible though a plurality of network as- 

35 signed with each network property value to other termi- 
nal for data communication. The terminal Includes : an 
access policy storing unit for storing at least an access 
policy; and an access pemnission decision function 
block for making a decision on pennlssiblllty for access 

40 to the other terminal, with reference to at least one of a 
first network property value assigned to a first network 
connected with the terminal and a second network prop- 
erty value assigned to a second network connected with 
the other tenninal, so that only when the access Is per- 

45 mitted based on the access policy, then the tenninal 
makes an access to the other terminal. 
[0113] The first and second network property values 
may be either Identical with or different each other, and 
the first and second networks are also either Identical 

50 with or different each other. 

[0114] The access policy may advantageously in- 
clude at least a transmission policy, and the access per- 
mission decision function block includes a data trans- 
mission pemnission decision function block which 

55 makes a decision on permissibility for data transmission 
to the other terminal, with reference to at least one of 
the first and second network property values, so that on- 
ly when the data transmission Is pemnltted based on the 
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transmission policy, then the terminal makes the data 
transmission to the other terminal. 
[0115] The temiinal may further Include : a network 
property value adding function block for adding a data- 
accompanying network property value to data entered 
by user ; and at least a data storage region for storing 
the data accompanied with the data-accompanying net- 
work property value. The data transmission permission 
decision function block may advantageously make the 
decision on permissibility for data transmission based 
on the transmission policy stored in the access policy 
storing unit with reference to the first and second net- 
work property values and the data-accompanying net- 
work property value, so that only when the data trans- 
mission is permitted based on the transmission policy, 
then the terminal makes a transmission of the data ac- 
companied with the data-accompanying network prop- 
erty value to the other terminal. 
[0116] The network property value adding function 
block may advantageously be adjusted to allow user to 
set the data-accompanying network property value to 
be added to the entered data every time when the en- 
tered data are stored in the data storage region. 
[01 17] The terminal may advantageously and further 
include a network property value changing function 
block for setting and changing the data-accompanying 
network property value stored in the data storage re- 
gion. 

[0118] The terminal may advantageously and further 
include an access policy changing function block for 
changing the access policy stored in the access policy 
storing unit. 

[01 1 9] The terminal may advantageously and further 

include a data receiving permission decision function 
block. The access policy storing unit may advanta- 
geously and further store, In addition to the transmission 
policy, at least a receiving policy, for allowing the data 
receiving permission decision function block to make a 
decision on permissibility for data receiving from the oth- 
er terminal, with reference to at least one of the first and 
second network property values, so that only when the 
data receiving is permitted based on the receiving poli- 
cy, then the temiinal makes the data receiving from the 
other terminal. 

[0120] The network property value adding function 
block may advantageously be adjusted to add a data- 
accompanying network property value to data entered 
by user before the data storage region stores the data 
accompanied with the data-accompanying network 
property value, to allow at least one of the data trans- 
mission permission decision function block and the data 
receiving permission decision function block to make 
the decision on permissibility for at least one of data 
transmission and data receiving, based on at least one 
of the transmission policy and the receiving policy, with 
reference to the first and second network property val- 
ues and the data-accompanying network property val- 
ue, so that only when the data transmission Is permitted 



based on the transmission policy, then the terminal 
makes a transmission of the data accompanied with the 
data-accompanying network property value to the other 
terminal, as well as only when the data receiving is per- 
5 mitted based on the receiving policy, then the terminal 
makes a receipt of the data accompanied with the data- 
accompanying network property value from the other 
temninal. 

[0121] The network property value adding function 
10 block may advantageously be adjusted to allow an us- 
er's instruction to set the data-accompanying network 
property value to be added to the entered data every 
time when the entered data are stored In the data stor- 
age region. 

15 [0122] The may advantageously and further include 
an network property value changing function block for 
setting and changing the data-accompanying network 
property value stored In the data storage region. 
[0123] The may advantageously and further include 

20 an access policy changing function block for changing 
at least one of the transmission policy and the receiving 
policy. 

[0124] The data storage region may advantageously 
comprise a plurality of data storage region, each of 
25 which is assigned with a storage-region-accompanying 
network property value, to allow the data transmission 
permission decision function block to make the decision 
on pennissibllity for data transmission based on the 
transmission policy with reference to the first and sec- 
30 ond network property values and the storage-region-ac- 
companying network property value, so that only when 
the data transmission is permitted based on the trans- 
mission policy, then the terminal makes a transmission 
of the data accompanied with the storage-reglon-ac- 
35 companying network property value to the other termi- 
nal. 

[0125] The terminal may advantageously and further 
Include a network property value changing function 
block for setting and changing the storage-region-ac- 
40 companying network property value stored in the data 
storage region. 

[0126] The temninal may advantageously and further 
include an access policy changing function block for 
changing the transmission policy. 
45 [0127] The data storage region may advantageously 
comprise a plurality of data storage region, each of 
which is assigned with a storage-region-accompanying 
network property value, to allow at least one of the data 
transmission permission decision function block and the 
50 data receiving pennission decision function block to 
make the decision on permissibility for at least one of 
data transmission and data receiving, based on at least 
one of the transmission policy and the receiving policy, 
with reference to the first and second network property 
55 values and the storage-region-accompanying network 
property value, so that only when the data transmission 
is permitted based on the transmission policy, then the 
temninal makes a transmission of the data accompanied 
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with the storage-region-accompanying network proper- 
ty value to the other terminal, as well as only when the 
data receiving is permitted based on the receiving poli- 
cy, then the terminal makes a receipt of the data from 
the other temnlnal. 

[0128] The may advantageously andfurther Including 
network property value changing function block for set- 
ting and changing the storage-region-accompanying 
network property value stored in each of the plurality of 

data storage region. 

[0129] The terminal may advantageously and further 
include an access policy changing function block for 
changing the receiving policy. 

[0130] The terminal may advantageously and further 
include a data storage region selecting function block 
for selecting one of the plurality of data storage region 
in accordance with an user's designation for allowing the 
selected one of the plurality of data storage region to 
store the received data. 

[0131] The terminal may advantageously and further 
include an alarm function block for informing user that 
the data receiving is not permitted based on the receiv- 
ing policy. 

[0132] The terminal may advantageously and further 
include an alarm function block for informing user that 
the data receiving is not pemnitted based on the receiv- 
ing policy. 

[01 33] The temnlnal may advantageously and further 
include a data receiving pemrilsslon decision request 
function block which is adjusted that if the data receiving 
Is not permitted based on the receiving policy, then the 
decision on pennissibility of data receiving Is made in 
accordance with an user's instruction. 
[0134] The terminal may advantageously and further 
include a data receiving pennission decision request 
function block which is adjusted that if the data receiving 
is not permitted based on the receiving policy, then the 
decision on permissibility of data receiving is made in 
accordance with an user's instruction. 
[0135] The data receiving permission decision re- 
quest function block may advantageously be adjusted 
that if the user's instruction is to pennit storing the re- 
ceived data, then a temporary pennission for receiving 
data is added to the receiving policy in a predetennined 
time period, 

[0136] The terminal may advantageously and further 
include a data storage region selecting function block 
for making a decision on pennissibility for storing the 
received data into any one of the plurality of data storage 
region in accordance with an user's instruction, if the da- 
ta receiving is pennitted based on the receiving policy 
but the plurality of data storage region does not include 
any datastorage region assigned with the same network 
property value as a network property value added to the 
received data. 

[0137] If the user's instruction is to pennit storing the 
received data, then the data storage region selecting 
function block may advantageously select one of the 



plurality of data storing regions for storing the received 
data is made in accordance with an user's instruction. 
[0138] The temnlnal may advantageously and further 
include a data receiving permission decision request 
5 function block adds a temporary pennission for receiv- 
ing data to the receiving policy in a predetennined time 
period if the user's instruction is to permit storing the re- 
ceived data. 

[0139] The temnlnal may advantageously and further 
10 include an alamn function block for infonning user that 
the data transmission is not pennitted based on the 
transmission policy. 

[0140] The terminal may advantageously and further 
include a data transmission pennission decision request 
15 function block for making the decision on pennissibility 
of data transmission in accordance with an user's in- 
struction, if the data transmission is not pennitted based 
on the transmission policy. 

[0141] The data transmission permission decision re- 

20 quest function block may advantageously add a tempo- 
rary permission for transmitting data to the transmission 
policy in a predetermined time period, if the user's in- 
struction Is to pennit transmitting the data. 
[0142] The temnlnal may advantageously and further 

25 Include an access permission decision operation Inhib- 
iting function block for making Invalid the decision on 
permissibility for access based on the access policy in 
accordance with an entered user's Instruction. 
[0143] The tenninal may advantageously and further 

30 Include a network property value table for holding re- 
spective correspondence between each network identi- 
fier and each network property value assigned to a net- 
work which Is also assigned to the each network identi- 
fier for the access pennission decision function block to 

35 obtain a network Identifier assigned to a network con- 
nected to the other terminal, to which the each terminal 
makes an access, based on a temnlnal address of the 
othertemrilnal, to specify a corresponding network prop- 
erty value to the obtained network Identifier. 

40 [0144] The tenninal may advantageously Include at 
least one file temnlnal which provides an additional data 
storage region. 

[0145] The tenninal may advantageously include at 
least one hard disk which provides an additional data 

45 storage region. 

[0146] A third aspect of the present invention is a 
method for data communication between a plurality of 
terminal being accessible through a plurality of network. 
The method includes : assigning each network property 

50 value to each of the plurality of network ; setting at least 
an access policy ; making a decision on pennissibility 
for access from a tenninal to other temnlnal of the plu- 
rality of temnlnal, with reference to at least one of a first 
network property value assigned to a first network con- 

55 nected with the each terminal and a second network 
property value assignedto a second network connected 
with the other terminal ; and making an access to the 
other terminal only when the access is pennitted based 
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on the access policy. 

[01471 The first and second network property values 
may be either identical with or different each other, and 
the first and second networks are also either identical 
with or different each other. 

[0148] The access policy may advantageously in- 
clude at least a transmission policy for making a deci- 
sion on permissibility for data transmission to the other 
terminal, with reference to at least one of the first and 
second network property values, so that only when the 
data transmission is pemnitted based on the transmis- 
sion policy, then the temninal makes the data transmis- 
sion to the other terminal. 

[0149] A data-accompanying network property value 
may advantageously be added to data entered by user 
before the data accompanied with the data-accompa- 
nying network property value are stored in at least a data 
storage region of the tenninal, to make the decision on 
pemnissibility for data transmission based on the trans- 
mission policy with reference to the first and second net- 
work property values and the data-accompanying net- 
work property value, so that only when the data trans- 
mission is pemnitted based on the transmission policy, 
then the terminal makes a transmission of the data ac- 
companied with the data-accompanying network prop- 
erty value to the other terminal. 
[0150] The method may advantageously and further 
Including : allowing user to set the data-accompanying 
network property value to be added to the entered data 
every time when the entered data are stored in the data 
storage region. 

[0151] The method may advantageously and further 
Including : setting and changing the data-accompanying 
network property value stored in the data storage re- 
gion. 

[0152] The method may advantageously and further 
including : changing the access policy. 
[01 53] The access policy may advantageously further 
include, in addition to the transmission policy at least a 
receiving policy for making a decision on permissibility 
for data receiving from the other temninal, with reference 
to at least one of the first and second network property 
values, so that only when the data receiving is pennitted 
based on the receiving policy, then the terminal makes 
the data receiving from the other tenninal. 
[0154] A data-accompanying network property value 
may advantageously be added to data entered by user 
before the data accompanied with the data-accompa- 
nying network property value are stored In at least a data 
storage region of the terminal, to make the decision on 
permissibility for at least one of data transmission and 
data receiving, based on at least one of the transmission 
policy and the receiving policy, with reference to the first 
and second network property values and the data-ac- 
companying network property value, so that only when 
the data transmission is pemnitted based on the trans- 
mission policy, then the temninal makes a transmission 
of the data accompanied with the data-accompanying 



network property value to the other terminal, as well as 
only when the data receiving is pennitted based on the 
receiving policy, then the terminal makes a receipt of the 
data accompanied with the data-accompanying network 

5 property value from the other tenninai. 

[0155] The method may advantageously and further 
include : allowing an user's instruction to set the data- 
accompanying network property value to be added to 
the entered data every time when the entered data are 

10 stored in the data storage region . 

[0156] The method may advantageously and further 
including : setting and changing the data-accompanying 
network property value stored In the data storage re- 
gion. 

15 [0157] The method may advantageously and further 
include : changing the receiving policy. 
[0158] The method may advantageously and further 
include : assigning each storage-region-accompanying 
network property value a plurality of data storage region, 

20 to make the decision on permissibility for data transmis- 
sion based on the transmission policy with reference to 
the first and second network property values and the 
storage-region-accompanying network property value, 
so that only when the data transmission is pemnitted 

25 based on the transmission policy, then the terminal 
makes a transmission of the data accompanied with the 
storage-region-accompanying network property value 
to the other temninal. 

[0159] The method may advantageously and further 
30 include : setting and changing the storage-region-ac- 
companying network property value stored in the data 
storage region. 

[0160] The method may advantageously and further 
include : changing the transmission policy 

35 [0161] The method may advantageously and further 
include : assigning each storage-region-accompanying 
network property value to each of a plurality of data stor- 
age region, to make the decision on permissibility for at 
least one of data transmission and data receiving, based 

40 on at least one of the transmission policy and the receiv- 
ing policy, with reference to the first and second network 
property values and the storage-region-accompanying 
network property value, so that only when the data 
transmission is pemnitted based on the transmission 

45 policy, then the terminal makes a transmission of the da- 
ta accompanied with the storage-region-accompanying 
network property value to the other terminal, as well as 
only when the data receiving is pemnitted based on the 
receiving policy, then the temninal makes a receipt of the 

50 data from the other terminal. 

[0162] The method may advantageously and further 
include : setting and changing the storage-region-ac- 
companying network property value stored in each of 
the plurality of data storage region. 

55 [0163] The method may advantageously and further 
Include : changing the receiving policy. 
[01 64] One of the plurality of data storage region may 
advantageously be selected In accordance with an us- 
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er's designation for allowing the selected one of the plu- 
rality of data storage region to store the received data. 
[0165] The method may advantageously and further 
include : informing user that the data receiving is not 
pennitted based on the receiving policy 
[0166] The method may advantageously and further 
include : infomning user that the data receiving is not 
pennitted based on the receiving policy. 
[01 67] If the data receiving is not pennitted based on 
the receiving policy, then the decision on permissibility 
of data receiving may advantageously be made in ac- 
cordance with an user's instruction. 
[0168] If the data receiving is not pennitted based on 
the receiving policy, then the decision on permissibility 
of data receiving may advantageously be made in ac- 
cordance with an user's instruction. 
[0169] If the user's Instruction is to pernnit storing the 
received data, then a temporary permission for receiv- 
ing data may advantageously be added to the receiving 
policy in a predetermined time period. 
[0170] If the data receiving is pennitted based on the 
receiving policy but the plurality of data storage region 
does not include any data storage region assigned with 
the same networl< property value as a network property 
value added to the received data, then a decision on 
pemnissibility for storing the received data into any one 
of the plurality of data storage region may advanta- 
geously be made in accordance with an user's instruc- 
tion. 

[0171] If the user's instruction is to pemnit storing the 
received data, then a selection of one of the plurality of 
data storing regions for storing the received data may 
advantageously be made in accordance with an user's 
instruction. 

[0172] If the user's instruction is to pennit storing the 
received data, then a temporary permission for receiv- 
ing data may advantageously be added to the receiving 
policy in a predetennined time period. 
[0173] The method may advantageously and further 
include : informing user that the data transmission is not 
permitted based on the transmission policy, 
[01 74] If the data transmission is not permitted based 
on the transmission policy, then the decision on permis- 
sibility of data transmission may advantageously be 
made in accordance with an user's Instruction. 
[0175] If the user's instruction is to permit transmitting 
the data, then a temporary pemnission for transmitting 
data may advantageously be added to the transmission 
policy in a predetermined time period. 
[0176] The method may advantageously and further 
Include : allowing an entered user's instruction to make 
invalid the decision on permissibility for access based 
on the access policy. 

[0177] If the each terminal is connected to a network 
assigned with the same network property value as of the 
other terminal, then the data only may advantageously 
be transmitted to the other terminal without being ac- 
companied the data-accompanying network property 



value. 

[0178] The network property value may advanta- 
geously include identifiers which identify a private net- 
work and a public network respectively. 
5 [0179] The network property value may advanta- 
geously include identifiers which identify different organ- 
izations respectively. 

[0180] The network property value may advanta- 
geously include Identifiers which identify respective 
10 node points Included in a hierarchical network stmcture. 
[0181] The network property value may advanta- 
geously include identifiers which do not identify any net- 
work. 

[0182] Each of the plurality of network may advanta- 

15 geously be assigned with each network identifier which 
uniquely identifies the each network, to specify the other 
terminal, to which the each terminal makes an access, 
based on a tennlnal address which Includes the each 
network identifier. 

20 [0183] The method may advantageously and further 
include : holding respective correspondence between 
the each network identifier and the each network prop- 
erty value assigned to a network which is also assigned 
to the each network identifier for obtaining a network 

25 identifier assigned to a network connected to the other 
terminal, to which the each temninal makes an access, 
based on a tennlnal address of the other tennlnal, to 
specify a corresponding network property value to the 
obtained network identifier. 

30 [01 84] The following embodiments are typical exam- 
ples for practicing the foregoing aspects of the present 
invention. Although the subject matters of the present 
Invention have been described in details, the following 
additional descriptions in one or more typical preferred 

35 embodiments or examples will be made with reference 
to the drawings for making it easy to understand the typ- 
ical modes for practicing the foregoing aspects of the 
present invention. 

40 FIRST EMBODIMENT: 

[0185] A first embodiment according to the present in- 
vention will be described In detail with reference to the 
drawings. FIG. 1 is a block diagram of a data communi- 

45 cation system in a first embodiment in accordance with 
the present invention. The data communication system 
in accordance with the present invention may include a 
plurality of different data communication networks and 
a plurality of data communication temninals. As one ex- 

50 ample, it will be assumed that the data communication 
system includes three different data communication net- 
works 101, 102 and 103 and four data communication 
terminals 1, 2, 3 and 4. The data communication net- 
work 1 01 is assigned with a property value PI . The data 

55 communication network 1 02 is assigned with a property 
value P2. The data communication network 103 is as- 
signed with a property value P3. Those property values 
PI , P2 and P3 may be either different from each other 
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or identical with eacln other. Those property values PI , 
P2 and P3 are Identifiers which identify the kinds of the 
networks. 

[0186] FIG. 2 is a block diagram of an Internal struc- 
ture of each of the fourth data communication terminals 
Included in the system of FIG. 1 . A data communication 
terminal 1 may include a network property value addition 
function block 11, a data storage region 12, an access 
policy storage unit 13, a data transmission pennission 
decision function block 14, a packet transmission func- 
tion block 15, and a storage medium 16 for storing one 
or more programs to be executed by the above respec- 
tive function blocks 11,14 and 1 5. The storage medium 
16 may be realized by any available storage means 
such as read only memory or Integrated circuit memory. 
The network property value addition function block 1 1 is 
provided for adding a determined network property val- 
ue to data 111 which have been entered by user of the 
data communication terminal 1 for allowing the data 1 1 2 
together with the added network property value to be 
stored in the data storage region 12. The data storage 
region 12 is provided for storing the data and the net- 
work property values added by the network property val- 
ue addition function block 11 . FIG. 3 is a block diagram 
of typical examples of data structure to be stored in the 
data storage region in the data communication temninai 
of FIG. 2. Three data A1 , A2 and A3 are stored in the 
data storage region 12. The data A1 are assigned with 
the network property value PI (B1 ). The data A2 are as- 
signed with the network property value P2(B2). The data 
A3 are assigned with the network property value P3(B3). 
[0187] With reference back to FIG. 2, the access pol- 
icy storage unit 1 3 Is provided for storing an access pol- 
icy or a transmission policy for allowing a decision, 
based on the transmission policy, of the pennission of 
transmission of the data stored in the data storage re- 
gion 12 to other data communication temninals 2, 3 and 
4 over the data communication network 101 . 
[0188] FIG. 4 is a diagram of one typical example of 
the transmission policy stored in the access policy stor- 
age unit included in the data communication terminal of 
FIG. 2. The data communication tenninal Is the data 
communication terminal 1 shown in FIG. 1 . The trans- 
mission policy comprises three entries C1 , C2 and C3, 
The contents In the entry C1 mean that in case of the 
network property value PI added to the data and stored 
in the data storage region 12, if the property value as- 
signed to the data communication network having the 
current connection with the present data communication 
terminal 1 as "sender" is PI , then the data transmission 
would be permitted to any data communication termi- 
nals as "receiver" over all of the data communication 
networks. The contents in the entry C2 mean that In 
case of the network property value P2 added to the data 
and stored in the data storage region 1 2, if the property 
value assigned to the data communication network hav- 
ing the current connection with the present data com- 
munication terminal 1 as "sender" is P2, then the data 



transmission would be permitted to any data communi- 
cation temninals as "receiver" but only over the data 
communication network assigned to the network prop- 
erty value P2. Namely, the data transmission would be 
5 permitted to any data communication tennlnals as "re- 
ceiver" over the same data communication network, to 
which the present data communication terminal 1 as 
"sender" is currently connected. The contents in the en- 
try C3 mean that in case of the network property value 
10 P3 added to the data and stored in the data storage re- 
gion 12, then independent from the property value as- 
signed to the data communication network having the 
current connection with the present data communication 
temninai 1 as "sender", the data transmission would be 
permitted to any data communication terminals as "re- 
ceiver" but only over the data communication network 
assigned to the network property value P3. Namely, the 
data transmission would be pemiltted to any data com- 
munication temninals as "receiver" but only over the data 
communication network assigned to the property value 
P3, regardless of the issue of current network connec- 
tion between the present data communication terminal 
1 as "sender" and any one of the data communication 
networks. The above presented contents are mere ex- 
amples but should not be limited thereto. 
[0189] FIG, 5 is a flow chart illustrative of a typical ex- 
ample of processes or operations shown by the data 
transmission pennission decision function block includ- 
ed in the data communication temninai of FIG. 2. The 
processes or operations shown by the data transmis- 
sion pennission decision function block 14 are imple- 
mented by execution of the program from the storage 
medium 16. In steps SI and S2, the data transmission 
permission decision function block 14 is started upon 
receipt of a data transmission request 113. In step S3, 
the data transmission pennission decision function 
block 1 4 retrieves the transmission data from the data 
storage region 1 2 and obtains the network property val- 
ue added to the retrieved transmission data 11 4. In step 
S4, the data transmission pennission decision function 
block 1 4 reads out the transmission policy 1 1 5 from the 
access policy storage unit 1 3. In step S5, the data trans- 
mission pennission decision function block 14 refers the 
network property value assigned to the data communi- 
cation network connected with one or more data com- 
munication terminals, to which the data transmission is 
intended to be made, and also refers the network prop- 
erty value assigned to the data communication network 
connected with the present data communication termi- 
nal 1 , so that the data transmission permission decision 
function block 1 4 makes a decision on the pennissibility 
of the data transmission based on the referred network 
property values. In step S6, if the data transmission per- 
mission decision function block 1 4 decides that the data 
transmission is pemnitted based on the transmission 
policy, then in step S7 the data transmission permission 
decision function block 1 4transfers the transmission da- 
ta 116 along with the network property value added to 
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the transmission data to the packet transmission func- 
tion blocl< 16 for requesting the packet transmission 
function block 15 to transmit the data. 
[0190] If the data communication terminal as "send- 
er", from which the data are transmitted, is connected 
to plural data communication networks, the data trans- 
mission permission decision function block 14 refers the 
network property value assigned to the data communi- 
cation network, via which the data transmission Is in- 
tended to be made, if the data communication tenninal 
as "receiver", to which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission pemnlssion decision function block 14 re- 
fers the network property value assigned to the data 
communication network, via which the data transmis- 
sion as "receiver" Is intended to receive the transmitted 
data. 

[0191] FIG. 6 Is a diagram of one typical example of 
transmission packet to be transmitted onto the data 
communication network by the packet transmission 
function block included in the data communication ter- 
minal of FIG. 2. In this typical example, a transmission 
data packet 117 shown in FIG. 2 is transmitted onto the 
data communication network 1 01 assigned with the net- 
work property value PI . The transmission data packet 
1 1 7 comprises a header D1 for controlling the transmis- 
sion, the network property value D2 of the transmission 
data, and transmission data (data #1) D3. The position 
of the network property value D2 of the transmission da- 
ta should not be limited to as shown in FIG. 6. Whereas 
the above descriptions of the Internal structure of the 
data communication terminal has been made with ref- 
erence to the data communication temritnal 1 , other data 
communication temriinais 2, 3 and 4 have the same In- 
ternal structures. 

SECOND EMBODIMENT: 

[0192] A second embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The second embodiment is appli- 
cable to the data communication system shown In FIG. 
1 and described in the first embodiment. FIG . 7 Is a block 
diagram of an internal structure of the data communica- 
tion tenninal of the second embodiment in accordance 
with the present Invention. A data communication termi- 
nal 20 may Include a network property value addition 
function block 21 , a data storage region 22, an access 
policy storage unit 23, a data transmission pemiisslon 
decision function block 24, a packet transmission func- 
tion block 25, and a storage medium 26 for storing one 
or more programs to be executed by the above respec- 
tive function blocks. The storage medium 26 may be re- 
alized by any available storage means such as read only 
memory or Integrated circuit memory. 
[0193] In this embodiment, the network property value 
addition function block 21 and its interface with user are 
different from the first embodiment. The network prop- 



erty value addition function block 21 is provided for add- 
ing a user-designated network property value to data 
211 which have been entered by user of the data com- 
munication terminal 20 for allowing the data 212 togeth- 
5 er with the added network property value to be stored 
in the data storage region 22. 

[0194] FIG. 8 is a flow chart of operations or process- 
es of the network property value addition function block 
included In the data communication tenninal of FIG. 7. 

10 The operations or processes of the network property 
value addition function block 21 may be Implemented 
by execution of the program from the storage medium 
26. In step S11, the network property value addition 
function block 21 receives an entry of the data from user 

IS with a request for storing the data into the data storage 
region 22. In step S12, the network property value ad- 
dition function block 21 also receives a designation 218 
of the network property value from the user, in step S13, 
the network property value addition function block 21 

20 adds the user-designated network property value to the 
data, and sends the data 212 with the user-designated 
network property value to the data storage region 22 for 
storing the same. The data storage region 22 stores the 
data and the network property values added by the net- 

25 work property value addition function block 21 . The ac- 
cess policy storage unit 23 stores an access policy or a 
transmission policy for allowing a decision, based on the 
transmission policy, of the pennission of transmission of 
the data stored In the data storage region 22 to other 

30 data communication tenninals over the data communi- 
cation networks. 

[0195] The processes or operations shown by the da- 
ta transmission pemnlssion decision function block 24 
are Implemented by execution of the program from the 

35 storage medium 26 as shown in FIG. 5 and described 
in the first embodiment. With reference back to FIG. 5, 
In steps S1 and S2, the data transmission permission 
decision function block 24 Is started upon receipt of a 
data transmission request 213. In step S3, the data 

40 transmission pennission decision function block 24 re- 
trieves the transmission data from the data storage re- 
gion 22 and obtains the network property value added 
to the retrieved transmission data 214. In step S4, the 
data transmission pemnlssion decision function block 24 

45 reads out the transmission policy 215 from the access 
policy storage unit 23. In step S5, the data transmission 
permission decision function block24 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 

50 terminals, to which the data transmission is intended to 
be made, and also refers the network property value as- 
signed to the data communication network connected 
with the present data communication temnlnal 20, so 
that the data transmission permission decision function 

55 block 24 makes a decision on the pemnisslbillty of the 
data transmission based on the referred network prop- 
erty values. In step S6, If the data transmission permis- 
sion decision function block 24 decides that the data 
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transmission Is permitted based on the transmission 
policy, then In step S7 the data transmission pennlssion 
decision function block 24 transfers the transmission da- 
ta 216 along with the network property value added to 
the transmission data to the packet transmission func- 5 
tlon block 25 for requesting the packet transmission 
function block 25 to transmit the data and the header 
with the network property value. A transmission data 
packet 217 is transmitted by the packet transmission 
function block 25 onto the data communication network 
assigned with the network property value of the data. 

THIRD EI^BODIMENT: 

[0196] A third embodiment according to the present 
invention will be described in detail with reference to the 
drawings. The third embodiment is applicable to the da- 
ta communication system shown In FIG. 1 and de- 
scribed In the first embodiment. FIG. 9 is a block dia- 
gram of an internal structure of the data communication 
terminal of the third embodiment in accordance with the 
present invention. A data communication terminal 30 
may Include a network property value addition function 
block 31, a data storage region 32, an access policy 
storage unit 33, a data transmission permission decision 
function block 34, a packet transmission function block 
35, a packet receiving function block 36, a data receiving 
permission decision function block 37 and a storage me- 
dium 38 for storing one or more programs to be execut- 
ed by the above respective function blocks. The storage 
medium 38 may be realized by any available storage 
means such as read only memory or Integrated circuit 
memory. 

[0197] In this embodiment, additional provisions of 
the packet receiving function block 36 and the data re- 
ceiving pemriission decision function block 37 as well as 
a receiving policy being stored in the access policy stor- 
age unit 33 in addition to the transmission policy are dif- 
ferent from the first embodiment. The network property 
value addition function block 31 is provided for adding 
a determined networkproperiy value to data 311 which 
have been entered by user of the data communication 
terminal 30 for allowing the data 312 together with the 
added network property value to be stored in the data 
storage region 32. The data storage region 32 stores 
the data and the network property values added by the 
network property value addition function block 21 . The 
access policy storage unit 33 stores not only a transmis- 
sion policy but also a receiving policy. The transmission 
policy allows a decision, based on the transmission pol- 
icy, of the permission of transmission of the data stored 
in the data storage region 32 to other data communica- 
tion terminals over the data communication networks. 
The receiving policy allows a decision, based on the re- 
ceiving policy, of the pemiission of receipt of the data 
from other data communication temninals over the data 
communication networks. 

[01 98] The processes or operations shown by the da- 



ta transmission pennlssion decision function block 34 
are implemented by execution of the program from the 
storage medium 38 as shown in FIG. 5 and described 
In the first embodiment. With reference back to FIG. 5, 
In steps SI and S2, the data transmission permission 
decision function block 34 is started upon receipt of a 
data transmission request 313. In step S3, the data 
transmission permission decision function block 34 re- 
trieves the transmission data from the data storage re- 
gion 32 and obtains the network property value added 
to the retrieved transmission data 314. In step S4, the 
data transmission pemnission decision function block 34 
reads out the transmission policy 315 from the access 
policy storage unit 33. In step S5, the data transmission 
permission decision function block 34 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 
temninals, to which the data transmission Is Intended to 
be made, and also refers the network property value as- 
signed to the data communication network connected 
with the present data communication tenninal 30, so 
that the data transmission permission decision function 
block 34 makes a decision on the pennissibillty of the 
data transmission based on the referred network prop- 
erty values. In step S6, if the data transmission permis- 
sion decision function block 34 decides that the data 
transmission is pemiltted based on the transmission 
policy, then in step S7 the data transmission permission 
decision function block 34transfers the transmission da- 
ta 316 along with the network property value added to 
the transmission data to the packet transmission func- 
tion block 36 for requesting the packet transmission 
function block 35 to transmit the data and the header 
with the network property value. A transmission data 
packet 317 is transmitted by the packet transmission 
function block 35 onto the data communication network 
assigned with the network property value of the data. 
[0199] If the data communication terminal as "send- 
er", from which the data are transmitted, is connected 
to plural data communication networks, the data trans- 
mission pemnission decision function block 34 refers the 
network property value assigned to the data communi- 
cation network, via which the data transmission Is In- 
tended to be made. If the data communication terminal 
as "receiver", to which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission permission decision function block 34 re- 
fers the network property value assigned to the data 
communication network, via which the data transmis- 
sion as "receiver" is intended to receive the transmitted 
data. 

[0200] FIG. 1 0 is a diagram of one typical example of 
the receiving policy stored In the access polby storage 
unit included In the data communication terminal of FIG. 
9. The receiving policy comprises three entries El , E2 
and E3. The contents In the entry El mean that in case 
of the network property value PI added to the data as 
transmitted, then independent from the property value 
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assigned to the data communication network having the 
current connection with the present data communication 
terminal 30 as "receiver", the data receiving would be 
permitted from any data communication terminals as 
"sender" but only over the data communication network 
assigned to the network property value P1 . Namely, the 
data receiving would be pennitted from any data com- 
munication terminals as "sender" but only over the data 
communication network assigned to the property value 
P1 , regardless of the issue of current network connec- 
tion between the present data communication terminal 
30 as "receiver" and any one of the data communication 
networks. The contents in the entry E2 mean that In case 
of the network property value P2 added to the data as 
transmitted, If the property value assigned to the data 
communication network having the current connection 
with the present data communication temriinal 30 as "re- 
ceiver" Is P2, then the data receiving would be pemnitted 
from any data communication terminals as "sender" but 
only over the data communication network assigned to 
the network property value P2. Namely, the data receiv- 
ing would be permitted from any data communication 
terminals as "sender" over the same data communica- 
tion network, to which the present data communication 
terminal 1 as "receiver" is currently connected. The con- 
tents in the entry E3 mean that in case of the network 
property value P3 added to the data as transmitted, then 
Independent from the property value assigned to the da- 
ta communication network having the current connec- 
tion with the present data communication terminal 30 as 
"receiver", the data receiving would be permitted to any 
data communication terminals as "sender" over all of the 
data communication networks. The above presented 
contents are mere examples but should not be limited 
thereto. 

[0201] FIG. 11 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication terminal of FIG. 9. The proc- 
esses or operations shown by the data receiving per- 
mission decision function block 37 are implemented by 
execution of the program from the storage medium 38. 
In step S21 , the packet receiving function block 36 re- 
ceives a packet 318. In step S22, the packet receiving 
function block 36 isolates a transmission control header, 
a network property value and the data from the received 
packet 318. The packet receiving function block 36 
sends a set 319 of the Isolated transmission control 
header, the network property value and the data to the 
data receiving permission decision function block 37. In 
step S23, the data receiving permission decision func- 
tion block 37 specifies a "sender" data communication 
terminal based on the received transmission control 
header. In step S24, the data receiving permission de- 
cision function block 37 reads out the receiving policy 
320 from the access policy storage unit 33. In step S25, 
the data receiving pemnission decision function block 37 
refers a network property value which is assigned to the 



data communication network connected with the "send- 
er" data communication terminal, and also refers the 
network property value received from the packet receiv- 
ing function block 36, so that the data receiving permis- 
5 sion decision function block 37 makes a decision on the 
permissibility of the data receiving with reference to the 
above both network property values. In step S26, if the 
data receiving pennission decision function block 37 de- 
cides that the data receiving is permitted based on the 
10 receiving policy, then in step S27, the data receiving per- 
mission decision function block 37 sends the received 
data 321 together with the network property value of the 
received data to the data storage region 32. 
[0202] If the sender data communication terminal as 
^5 "sender", from which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 37 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission 
was made. If the present data communication terminal 
as "receiver", to which the data were transmitted, is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 37 refers 
the network property value assigned to the data com- 
munication network, via which the present data trans- 
mission as "receiver" receives the transmitted data. The 
difference of this embodiment from the first embodiment 
may also be applicable to the second embodiment, so 
as to modifythe data communication terminal of the sec- 
ond embodiment in accordance with this third embodi- 
ment. 

FOURTH EMBODIMENT: 

[0203] A fourth embodiment according to the present 
invention will be described in detail with reference to the 
drawings. The fourth embodiment is applicable to the 
data communication system shown in FIG. 1 and de- 
scribed in the first embodiment. FIG. 12 is a block dia- 
gram of an internal structure of the data communication 
terminal of the fourth embodiment in accordance with 
the present invention. A data communication terminal 
40 may include a network property value addition func- 
tion block 41 , a data storage region 42, an access policy 
storage unit 43, a data transmission pennission decision 
function block 44, a packet transmission function block 
45, a packet receiving function block 46, a data receiving 
pemnission decision function block 47, a network prop- 
erty value changing function block 48 and a storage me- 
dium 49 for storing one or more programs to be execut- 
ed by the above respective function blocks. The storage 
medium 49 may be realized by any available storage 
means such as read only memory or Integrated circuit 
memory. 

[0204] In this embodiment, an additional provision of 
the network property value changing function block 48 
is different from the third embodiment. The network 
property value addition function block 41 is provided for 
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adding a determined network property value to data 41 1 
which have been entered by user of the data connmuni- 
catlon terminal 40 for allowing the data 41 2 together with 
the added network property value to be stored in the da- 
ta storage region 42. The network property value chang- 
ing function block 48 Is provided for changing the 
present network property value accompanied to the 
presently stored data In the data storage region 42 into 
a user's designated new network property value. FIG. 
1 3 is a flow chart of operations or processes of the net- 
work property value changing function block included in 
the data communication terminal of FIG. 12. The oper- 
ations or processes of the network property value 
changing function block 48 are implemented by execu- 
tion of the program from the storage medium 49. In step 
S31 , user of the data communication terminal 40 may 
designate data accompanied with the network property 
value which Is Intended by the user to be changed into 
an user's designated new network property value. The 
user also enters the designation of the data and this us- 
er's designated new network property value 422 into the 
network property value changing function block 48. In 
step S32, the network property value changing function 
block 48 changes the present network property value 
accompanied to the designated data presently stored In 
the data storage region 42 into the user's designated 
new network property value 423. The data storage re- 
gion 42 stores the data and the network property values 
added by the network property value addition function 
block 41 or the new network property values changed 
by the network property value changing function block 
48. The access policy storage unit 43 stores not only a 
transmission policy but also a receiving policy. The 
transmission policy allows a decision, based on the 
transmission policy, of the permission of transmission of 
the data stored in the data storage region 42 to other 
data communication terminals over the data communi- 
cation networks. The receiving policy allows a decision, 
based on the receiving policy, of the pemnission of re- 
ceipt of the data from other data communication termi- 
nals over the data communication networks. 
[0205] The processes or operations shown by the da- 
ta transmission pennlsslon decision function block 44 
are implemented by execution of the program from the 
storage medium 49 as shown in FIG. 5 and described 
in the first embodiment. With reference back to FIG. 5, 
in steps SI and S2, the data transmission pemnission 
decision function block 44 is started upon receipt of a 
data transmission request 413. In step S3, the data 
transmission permission decision function block 44 re- 
trieves the transmission data from the data storage re- 
gion 42 and obtains the network property value added 
to the retrieved transmission data 414. In step S4, the 
data transmission permission decision function block 44 
reads out the transmission policy 415 from the access 
policy storage unit 43. In step S5, the data transmission 
pemnission decision function block 44 refers the network 
property value assigned to the data communication net- 



work connected with one or more data communication 
terminals, to which the data transmission is Intended to 
be made, and also refers the network property value as- 
signed to the data communication network connected 

5 with the present data communication terminal 40, so 
that the data transmission permission decision function 
block 44 makes a decision on the pennissibility of the 
data transmission based on the referred network prop- 
erty values. In step S6, if the data transmission permis- 

10 slon decision function block 44 decides that the data 
transmission is pennitted based on the transmission 
policy, then in step S7 the data transmission permission 
decision function block 44transfersthetransmission da- 
ta 416 along with the network property value added to 

15 the transmission data to the packet transmission func- 
tion block 45 for requesting the packet transmission 
function block 45 to transmit the data and the header 
with the network property value. A transmission data 
packet 41 7 is transmitted by the packet transmission 

20 function block 45 onto the data communication network 
assigned with the network property value of the data, 
[0206] If the data communication temninal as "send- 
er**, from which the data are transmitted, is connected 
to plural data communication networks, the data trans- 

25 mission pemilssion decision function block 44 refers the 
network property value assigned to the data communi- 
cation network, via which the data transmission is in- 
tended to be made. If the data communication terminal 
as "receiver", to which the data are transmitted, is con- 

30 nected to plural data communication networks, the data 
transmission permission decision function block 44 re- 
fers the network property value assigned to the data 
communication network, via which the data transmis- 
sion as "receiver" Is intended to receive the transmitted 

35 data. 

[0207] The processes or operations shown by the da- 
ta receiving pennission decision function block 47 are 
implemented by execution of the program from the stor- 
age medium 49 which are described In the third embod- 

40 iment with reference to FIG. 11 . In step 821 , the packet 
receiving function block 46 receives a packet 418. In 
step S22, the packet receiving function block 46 isolates 
a transmission control header, a network property value 
and the data from the received packet 41 8. The packet 

45 receiving function block 46 sends a set 41 9 of the iso- 
lated transmission control header, the network property 
value and the data to the data receiving pennission de- 
cision function block 47. In step S23, the data receiving 
pennission decision function block 47 specifies a "send- 

50 er" data communication terminal based on the received 
transmission control header, in step 824, the data re- 
ceiving pemnission decision function block 47 reads out 
the receiving policy 420 from the access policy storage 
unit 43. In step S25, the data receiving pennission de- 

55 cislon function block 47 refers a network property value 
which is assigned to the data communication network 
connected with the "sender" data communication temni- 
nal, and also refers the network property value received 
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from the packet receiving function blocl< 46, so that the 
data receiving pemnisslon decision function block 47 
makes a decision on the permissibility of the data re- 
ceiving with reference to the above both network prop- 
erty values. In step S26, If the data receiving permission 
decision function block 47 decides that the data receiv- 
ing is permitted based on the receiving policy, then in 
step S27, the data receiving permission decision func- 
tion block 47 sends the received data 421 together with 
the network property value of the received data to the 
data storage region 42. 

[0208] If the sender data communication tenninal as 
"sender", from which the data are transmitted. Is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 47 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission 
was made. If the present data communication tenninal 
as "receiver"', to which the data were transmitted, Is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 47 refers 
the network property value assigned to the data com- 
munication network, via which the present data trans- 
mission as "receiver" receives the transmitted data. The 
difference of this embodiment from the third embodi- 
ment may also be applicable to the above first and sec- 
ond embodiments, so as to modify the data communi- 
cation terminals of the first and second embodiments in 
accordance with this fourth embodiment. 

Flf=TH EMBODIMENT: 

[0209] A fifth embodiment according to the present in- 
vention will be described In detail with reference to the 
drawings. The fifth embodiment is applicable to the data 
communication system shown in FIG. 1 and described 
In the first embodiment. FIG. 14 is a block diagram of 
an internal structure of the data communication temilnal 
of the fifth embodiment In accordance with the present 
invention. A data communication terminal 50 may in- 
clude a network property value addition function block 
51 , a data storage region 52, an access policy storage 
unit 53, a data transmission pemnlsslon decision func- 
tion block 54, a packet transmission function block 56, 
a packet receiving function block 56, a data receiving 
permission decision function block 57, a network prop- 
erty value changing function block 58, an access policy 
changing function block 59 and a storage medium 60 
for storing one or more programs to be executed by the 
above respective function blocks. The storage medium 
60 may be realized by any available storage means 
such as read only memory or Integrated circuit memory. 
[0210] In this embodiment, an additional provision of 
the access policy changing function block 59 is different 
from the fourth embodiment. The network property val- 
ue addition function block 51 is provided for adding a 
determined network property value to data 511 which 
have been entered by user of the data communication 



terminal 50 for allowing the data 512 together with the 
added network property value to be stored in the data 
storage region 52. The network property value changing 
function block 58 is provided for changing the present 

5 network property value accompanied to the presently 
stored data in the data storage region 52 into a user's 
designated new network property value. The operations 
or processes of the network property value changing 
function block 58 are implemented by execution of the 

10 program from the storage medium 60 as described In 
the fourth embodiment with reference to FIG. 13. Instep 
S31 , user of the data communication tenninal 50 may 
designates data accompanied with the network property 
value which is intended by the user to be changed into 

15 an user's designated new network property value. The 
user also enters the designation of the data and this us- 
er's designated new network property value 522 into the 
network property value changing function block 58. In 
step S32, the network property value changing function 

20 block 58 changes the present network property value 
accompanied to the designated data presently stored in 
the data storage region 52 into the user's designated 
new network property value 523. The data storage re- 
gion 52 stores the data and the network property values 

25 added by the network property value addition function 
block 51 or the new network property values changed 
by the network property value changing function block 
58. The access policy storage unit 53 stores not only a 
transmission policy but also a receiving policy. The 

30 transmission policy allows a decision, based on the 
transmission policy, of the pennission of transmission of 
the data stored in the data storage region 52 to other 
data communication terminals over the data communi- 
cation networks. The receiving policy allows a decision, 

35 based on the receiving policy, of the permission of re- 
ceipt of the data from other data communication tenni- 
nals overthe data communication networks. The access 
policy changing function block 59 changes or replaces 
the present access policy, for example, at least one of 

40 the transmission policy and the receiving policy stored 
in the access policy storage unit 53 into a new access 
policy 524, for example, at least one of a new transmis- 
sion policy 524 and a new receiving policy 524 which 
are designated by the user. 

45 [0211] FIG. 15 is a flow chart of operations or proc- 
esses of the access policy changing function block in- 
cluded in the data communication terminal of FIG. 14. 
The operations orprocesses of the access policy chang- 
ing function block 59 are Implemented by execution of 

50 the program from the storage medium 60. In steps S41 , 
user of the data communication tenninal 50 may enter 
a new access policy 524, for example, at least one of a 
new transmission policy 524 and a new receiving policy 
524 into the access policy changing function block 59. 

55 In step S42, If the entered new access policy 524 is a 
user's designated new transmission policy 524, then in 
step S43, the access policy changing function block 69 
changes or replaces the present transmission policy 
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stored in the access policy storage unit 53 into the user's 
designated new transmission policy 525. If the entered 
new access policy 524 is a user's designated new re- 
ceiving policy 524, then In step S44, the access policy 
changing function blocl< 59 changes or replaces the 
present receiving policy stored in the access policy stor- 
age unit 53 into the user's designated new receiving pol- 
icy 525. 

[021 2] The processes or operations shown by the da- 
ta transmission pennission decision function block 54 
are implemented by execution of the program from the 
storage medium 60 as shown in FIG. 5 and described 
in the first embodiment. With reference back to FIG. 5, 
in steps S1 and S2, the data transmission pennission 
decision function block 54 is started upon receipt of a 
data transmission request 513. In step S3, the data 
transmission permission decision function block 54 re- 
trieves the transmission data from the data storage re- 
gion 52 and obtains the network property value added 
to the retrieved transmission data 514. In step S4, the 
data transmission permission decision function block 54 
reads out the transmission policy 515 from the access 
policy storage unit 53. In step S5, the data transmission 
permission decision function block 54 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 
terminals, to which the data transmission Is intended to 
be made, and also refers the network property value as- 
signed to the data communication network connected 
with the present data communication temninal 50, so 
that the data transmission permission decision function 
block 54 makes a decision on the permissibility of the 
data transmission based on the referred network prop- 
erty values. In step S6, if the data transmission permis- 
sion decision function block 54 decides that the data 
transmission is permitted based on the transmission 
policy, then in step S7 the data transmission pennission 
decision function block 54 transfers the transmission da- 
ta 516 along with the network property value added to 
the transmission data to the packet transmission func- 
tion block 55 for requesting the packet transmission 
function block 55 to transmit the data and the header 
with the network property value. A transmission data 
packet 517 is transmitted by the packet transmission 
function block 55 onto the data communication network 
assigned with the network property value of the data. 
[0213] If the data communication terminal as "send- 
er", from which the data are transmitted, is connected 
to plural data communication networks, the data trans- 
mission permission decision function block 54 refers the 
network property value assigned to the data communi- 
cation network, via which the data transmission is in- 
tended to be made. If the data communication temninal 
as "receiver", to which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission pennission decision function block 64 re- 
fers the network property value assigned to the data 
communication network, via which the data transmis- 



sion as "receiver" is intended to receive the transmitted 

data, 

[021 4] The processes or operations shown by the da- 
ta receiving pennission decision function block 67 are 

5 Implemented by execution of the program from the stor- 
age medium 60 which are described in the third embod- 
iment with reference to FIG. 1 1 . In step S21 , the packet 
receiving function block 56 receives a packet 518. In 
step S22, the packet receiving function block 56 Isolates 

10 a transmission control header, a network property value 
and the data from the received packet 518. The packet 
receiving function block 56 sends a set 51 9 of the iso- 
lated transmission control header, the network property 
value and the data to the data receiving pennission de- 

15 cision function block 57. In step S23, the data receiving 
permission decision function block 57 specifies a "send- 
er" data communication terminal based on the received 
transmission control header. In step S24, the data re- 
ceiving permission decision function block 57 reads out 

20 the receiving policy 520 from the access policy storage 
unit 53. In step S25, the data receiving pennission de- 
cision function block 57 refers a network property value 
which is assigned to the data communication network 
connected with the "sender" data communication temril- 

25 nal, and also refers the network property value received 
from the packet receiving function block 56, so that the 
data receiving pennission decision function block 57 
makes a decision on the permissibility of the data re- 
ceiving with reference to the above both network prop- 

30 erty values. In step S26, If the data receiving permission 
decision function block 57 decides that the data receiv- 
ing is pennltted based on the receiving policy, then in 
step S27, the data receiving permission decision func- 
tion block 57 sends the received data 521 together with 

35 the network property value of the received data to the 
data storage region 52. 

[0215] If the sender data communication terminal as 
"sender", from which the data are transmitted, is con- 
nected to plural data communication networks, the data 

40 transmission receiving decision function block 57 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission 
was made. If the present data communication terminal 
as "receiver", to which the data were transmitted, is con- 

45 nected to plural data communication networks, the data 
transmission receiving decision function block 57 refers 
the network property value assigned to the data com- 
munication network, via which the present data trans- 
mission as "receiver" receives the transmitted data. The 

50 difference of this embodiment from the fourth embodi- 
ment may also be applicable to the above first, second 
and third embodiments, so as to modify the data com- 
munication terminals of the first, second and third em- 
bodiments In accordance with this fifth embodiment. 

55 

SIXTH EMBODIMENT 

[0216] A sixth embodiment according to the present 
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invention will be described in detail with reference to the 
drawings. The sixth embodiment is applicable to the da- 
ta communication system shown in FIG. 1 and de- 
scribed in the first embodiment. FIG. 16 is a block dia- 
gram of an Internal stmcture of the data communication 
terminal of the sixth embodiment in accordance with the 
present Invention. A data communication terminal 70 
may Include a data storage region selecting function 
block 71 , plural data storage regions 72, 73 and 74, an 
access policy storage unit 75, a data transmission per- 
mission decision function block 76, a packet transmis- 
sion function block 77, and a storage medium 78 for stor- 
ing one or more programs to be executed by the above 
respective function blocks. The storage medium 78 may 
be realized by any available storage means such as 
read only memory or integrated circuit memory. The 
number of the plural data storage regions may be three 
as shown by the reference numerals 72, 73 and 74 but 
should not be limited to three. In this embodiment, a plu- 
rality of data storage region Is provided. 
[0217] In this embodiment, an alternative provision of 
the data storage region selecting function block 71 In- 
stead of the network property value addition function 
block and a further provision of the plural number of the 
data storage region are different from the first embodi- 
ment. The data storage region selecting function block 
71 Is provided for adding a user-designated network 
property value to data 711 which have been entered by 
user of the data communication tennlnal 70 for allowing 
the data 713 together with the added network property 
value to be stored in the data storage regions 72, 73 and 
74. 

[021 8] FIG. 1 7 Is a block diagram of an Internal struc- 
ture of one of the data storage regions included In the 
data communication terminal of FIG. 16. The data stor- 
age region 72 includes a network property value storage 
region 72a and a data storage region 72b. The network 
property value storage region 72a stores a network 
property value P1 . The data storage region 72b stores 
three data #1,#2 and #3. 

[0219] FIG. 18 is a flow chart of operations or proc- 
esses of the network property value addition function 
block Included in the data communication tenninal of 
FIG. 16. The operations or processes of the data stor- 
age region selecting function block 71 may be imple- 
mented by execution of the program from the storage 
medium 78. In step S51 , the data storage region select- 
ing function block 71 receives an entry of data 711 and 
a network property value 712 from user. In step S52, the 
data storage region selecting function block 71 also se- 
lects one of the data storage regions 72, 73 and 74, 
wherein the selected one of the data storage regions 72, 
73 and 74 has the same network property value as the 
user's designated network property value 712 received 
from user. The data storage region selecting function 
block 71 sends the data 713 to the selected one of the 
data storage regions 72, 73 and 74 for storing the data 
71 3 therein. The access policy storage unit 75 stores an 



access policy or a transmission policy for allowing a de- 
cision, based on the transmission policy, of the permis- 
sion of transmission of the data stored in the data stor- 
age regions 72, 73 and 74 to other data communication 

5 terminals over the data communication networks. 

[0220] FIG. 1 9 is a diagram of one typical example of 
the transmission policy stored In the access policy stor- 
age unit included in the data communication terminal of 
FIG. 16. The transmission policy comprises three en- 

10 tries G1 , G2 and G3. The contents In the entry G1 mean 
that in case that data are stored in the data storage re- 
gion having the network property value PI , if the prop- 
erty value assigned to the data communication network 
having the current connection with the present data 

15 communication tennlnal as "sender" Is PI , then the data 
transmission would be permitted to any data communi- 
cation terminals as "receiver" over all of the data com- 
munication networks. The contents In the entry G2 
mean that In case that data are stored In the data ster- 
eo age region having the network property value P2, If the 
property value assigned to the data communication net- 
work having the current connection with the present da- 
ta communication terminal as "sender" is P2, then the 
data transmission would be pemnitted to any data com- 

25 munlcatlon tennlnals as "receiver" but only over the data 
communication network assigned to the network prop- 
erty value P2. Namely, the data transmission would be 
permitted to any data communication terminals as "re- 
ceiver" over the same data communication network, to 

30 which the present data communication temriinal 1 as 
"sender" is currently connected. The contents In the en- 
try G3 mean that in case that data are stored in the data 
storage region having the network property value P3, 
then Independent from the property value assigned to 

35 the data communication network having the current con- 
nection with the present data communication terminal 
as "sender", the data transmission would be pennitted 
to any data communication tenninals as "receiver" but 
only over the data communication network assigned to 

40 the network property value P3. Namely, the data trans- 
mission would be permitted to any data communication 
terminals as "receiver" but only over the data communi- 
cation network assigned to the property value P3, re- 
gardless of the Issue of current network connection be- 

45 tween the present data communication terminal as 
"sender" and any one of the data communication net- 
works. The above presented contents are mere exam- 
ples but should not be limited thereto. 
[0221] FIG. 20 Is a flow chart Illustrative of a typical 

50 example of processes or operations shown by the data 
transmission permission decision function block includ- 
ed in the data communication terminal of FIG. 16. The 
processes or operations shown by the data transmis- 
sion permission decision function block 76 are imple- 

55 mented by execution of the program from the storage 
medium 78 as follows. With reference back to FIG. 20, 
in steps S61 and S62, the data transmission permission 
decision function block 76 is started upon receipt of a 
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data transmission request 714. In step S63, the data 
transmission permission decision function block 76 ob- 
tains respective network property values 715 from the 
data storage regions 72, 73 and 74. In step S64, the 
data transmission pemnission decision function block 76 
reads out the transmission policy 716 from the access 
policy storage unit 75. In step S65, the data transmission 
pemnlssion decision function block 76 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 
terminals as "receiver", to which the data transmission 
Is intended to be made, and also refers the network 
property value assigned to the data communication net- 
work connected with the present data communication 
terminal 70 as "sender", so that the data transmission 
permission decision function block 76 makes a decision 
on the permissibility of the data transmission based on 
the referred network property values. In step S66, if the 
data transmission permission decision function bfock 76 
decides that the data transmission Is pennltted based 
on the transmission policy, then In step S67 the data 
transmission pemrilssion decision function block 76 
transfers the transmission data 717 along with the net- 
work property value of the data storage region 72, 73 or 
74 stored the transmission data to the packet transmis- 
sion function block 77 for requesting the packet trans- 
mission function block 77 to transmit the data and the 
header with the network property value. A transmission 
data packet 71 8 Is transmitted by the packet transmis- 
sion function block 77 onto the data communication net- 
work assigned with the network property value of the 
data. 

SEVENTH EMBODIMENT: 

[0222] A seventh embodiment according to the 
present invention will be described In detail with refer- 
ence to the drawings. The seventh embodiment Is ap- 
plicable to the data communication system shown in 
FIG. 1 and described in the first embodiment. FIG. 21 is 
a block diagram of an internal structure of the data com- 
munication terminal of the seventh embodiment in ac- 
cordance with the present Invention, A data communi- 
cation tenninal 80 may include a data storage region se- 
lecting function block 81 , plural data storage regions 82, 
83 and 84, an access policy storage unit 85, a data 
transmission permission decision function block 86, a 
packet transmission function block 87, a packet receiv- 
ing function block 88, a data receiving pennisslon deci- 
sion function block 89 and a storage medium 90 for stor- 
ing one or more programs to be executed by the above 
respective function blocks. The storage medium 90 may 
be realized by any available storage means such as 
read only memory or integrated circuit memory. The 
number of the plural data storage regions may be three 
as shown by the reference numerals 82, 83 and 84 but 
should not be limited to three. In this embodiment, a plu- 
rality of data storage region is provided. 



[0223] In this embodiment, additional provisions of 
the packet receiving function block 88 and the data re- 
ceiving permission decision function block 89 as well as 
a receiving policy being stored In the access policy stor- 
5 age unit 85 In addition to the transmission policy are dif- 
ferent from the sixth embodiment. The data storage re- 
gion selecting function block 81 is provided for adding 
a user-designated network property value to data 811 
which have been entered by user of the data communi- 
cation tenrtinal 80 for allowing the data 81 3 together with 
the added network property valueto be stored In the da- 
ta storage regions 82, 83 and 84. The operations or 
processes of the data storage region selecting function 
block 81 may be implemented by execution of the pro- 
gram from the storage medium 90 as shown in FIG. 18 
and described in the sixth embodiment. In step S51 , the 
data storage region selecting function block 81 receives 
an entry .of data 811 and a network property value 812 
from user. In step S52, the data storage region selecting 
function block 81 also selects one of the data storage 
regions 82, 83 and 84, wherein the selected one of the 
data storage regions 82, 83 and 84 has the same net- 
work property value as the user's designated network 
property value 81 2 received from user. The data storage 
region selecting function block 81 sends the data 81 3 to 
the selected one of the data storage regions 82, 83 and 
84 for storing the data 813 therein. The access policy 
storage unit 85 stores not only a transmission policy but 
also a receiving policy. The transmission policy allows 
a decision, based on the transmission policy, of the per- 
mission of transmission of the data stored in the data 
storage region 82, 83 or 84 to other data communication 
temninals over the data communication networks. The 
receiving policy allows a decision, based on the receiv- 
ing policy, of the pemnission of receipt of the data from 
other data communication terminals over the data com- 
munication networks. 

[0224] The processes or operations shown by the da- 
ta transmission pemnlssion decision function block 86 
are Implemented by execution of the program from the 
storage medium 90 as shown in FIG. 20 and as follows. 
With reference back to FIG. 20, In steps S61 and S62, 
the data transmission pemnlssion decision function 
block 86 Is started upon receipt of a data transmission 
request 81 4. In step S63, the data transmission pemnls- 
sion decision function block 86 obtains respective net- 
work property values 815 of the data storage regions 
82, 83 and 84. In step S64, the data transmission per- 
mission decision function block 86 reads out the trans- 
mission policy 816 from the access policy storage unit 
85, In step S65, the data transmission permission deci- 
sion function block 86 refers the network property value 
assigned to the data communication network connected 
with one or more data communication terminals as "re- 
ceiver", to which the data transmission is intended to be 
made, and also refers the network property value as- 
signed to the data communication network connected 
with the present data communication tenninal 80 as 
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"sender", so that the data transmission permission de- 
cision function block 86 makes a decision on the per- 
missibility of the data transmission based on the referred 
network property values. In step S66, if the data trans- 
mission permission decision function block 86 decides s 
that the data transmission is pemnitted based on the 
transmission policy, then in step S67 the data transmis- 
sion permission decision function block 86 transfers the 
transmission data 817 along with the network property 
value of the data storage region 82, 83 or 84 stored the 
transmission data to the packet transmission function 
block 87 for requesting the packet transmission function 
block 87 to transmit the data and the header with the 
network property value. A transmission data packet 81 8 
Is transmitted by the packet transmission function block 
87 onto the data communication network assigned with 
the network property value of the data. If the data com- 
munication temnlnal as "sender", from which the data 
are transmitted, is connected to plural data communica- 
tion networks, the data transmission pemriission deci- 
sion function block 86 refers the network property value 
assigned to the data communication network, via which 
the data transmission is intended to be made. If the data 
communication terminal as "receiver"*, to which the data 
are transmitted, Is connected to plural data communica- 
tion networks, the data transmission pennission deci- 
sion function block 86 refers the network property value 
assigned to the data communication network, via which 
the data transmission as "receiver" is intended to re- 
ceive the transmitted data. 

[0225] FIG. 22 Is a diagram of one typical example of 
the transmission policy stored in the access policy stor- 
age unit included in the data communication temiinal of 
FIG. 21. The transmission policy comprises three en- 
tries H1 , H2 and H3. The contents In the entry HI mean 
that In case that data are stored in the data storage re- 
gion having the network property value P1 and also the 
network property value added to the data is PI, then 
independent from the property value assigned to the da- 
ta communication network having the current connec- 
tion with the present data communication tenninal 80 as 
"receiver", the data receiving would be permitted from 
any data communication terminals as "sender" but only 
over the data communication network assigned to the 
network property value P1 . The contents in the entry H2 
mean that in case that data are stored in the data stor- 
age region having the network property value P2 and 
also the network property value added to the data is P2, 
if the property value assigned to the data communica- 
tion network having the current connection with the 
present data communication temninal 80 as "receiver"* 
is P2, then the data receiving would be permitted from 
any data communication terminals as "sender" but only 
over the data communication network assigned to the 
network property value P2. The contents in the entry H3 
mean that in case that data are stored in the data stor- 
age region having the network property value P3, then 
Independent from the network property value added to 



the data and also from the property value assigned to 
the data communication network having the current con- 
nection with the present data communication terminal 
80 as "receiver", the data receiving would be pemnitted 
to any data communication terminals as "sender" over 
all of the data communication networks. The above pre- 
sented contents are mere examples but should not be 
limited thereto. 

[0226] FIG. 23 Is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 
the data communication terminal of FIG. 21 . The proc- 
esses or operations shown by the data receiving per- 
mission decision function block 89 are implemented by 
execution of the program from the storage medium 90. 
In step S71 , the packet receiving function block 88 re- 
ceives a packet 819. In step S72, the packet receiving 
function block 88 isolates a transmission control header, 
a network property value and the data from the received 
packet 819. The packet receiving function block 88 
sends a set 820 of the isolated transmission control 
header, the network property value and the data to the 
data receiving permission decision function block 89. In 
step S73, the data receiving permission decision func- 
tion block 89 specifies a "sender" data communication 
terminal based on the received transmission control 
header. In step S74, the data receiving permission de- 
cision function block 89 reads out the receiving policy 
821 from the access policy storage unit 85. In step S75, 
the data receiving permission decision function block 89 
refers a network property value which is assigned to the 
data communication network connected with the "send- 
er" data communication terminal, and also refers the 
network property value received from the packet receiv- 
ing function block 88 as well as refers a network property 
value which is assigned to the data communication net- 
work connected with the present data communication 
terminal as "receiver", so that the data receiving permis- 
sion decision function block 89 makes a decision on the 
pemilsslbllity of the data receiving with reference to the 
above respective network property values. In step S76, 
if the data receiving permission decision function block 
89 decides that the data receiving is permitted based on 
the receiving policy, then in step S77, the data receiving 
permission decision function block 89 sends the re- 
ceived data 822 together with the network property val- 
ue of the received data to the data storage region 82, 
83 or 84. If the sender data communication tenninal as 
"sender, from which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 89 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission 
was made. If the present data communication terminal 
as "receiver" , to which the data were transmitted, Is con- 
nected to plural data communication networks, the data 
transmission receiving decision function block 89 refers 
the network property value assigned to the data com- 
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munication network, via which the present data trans- 
mission as "receiver" receives the transmitted data. 

EIGHTH EMBODIMENT: 

5 

[0227] An eighth embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The eighth embodiment Is appli- 
cable to the data communication system shown in FIG. 
1 and described In the first embodiment. FIG. 24 Is a io 
block diagram of an Internal structure of the data com- 
munication temninal of the eighth embodiment in accord- 
ance with the present invention. A data communication 
tenninal 120 may include a data storage region select- 
ing function block 1 21 , plural data storage regions 1 22, is 
123 and 124, an access policy storage unit 125, a data 
transmission permission decision function block 126, a 
packet transmission function block 1 27, a packet receiv- 
ing function block 128, a data receiving permission de- 
cision function block 1 29, a received data storage region 
selecting function block 130 and a storage medium 131 
for storing one or more programs to be executed by the 
above respective function blocks. The storage medium 
131 may be realized by any available storage means 
such as read only memory or integrated circuit memory. 25 
The number of the plural data storage regions may be 
three as shown by the reference numerals 82, 83 and 
84 but should not be limited to three. In this embodiment, 
a plurality of data storage region is provided. 
[0228] In this embodiment, an additional provision of so 
the received data storage region selecting function 
block 1 30 as well as modification in operation of the data 
receiving permission decision function block 1 29 are dif- 
ferent from the seventh embodiment. The data storage 
region selecting function block 121 Is provided for add- 35 
ing a user-designated network property value to data 
1211 which have been entered by user of the data com- 
munication temninal 120 for allowing the data 1213 to- 
gether with the added network property value to be 
stored In the data storage regions 122, 123 and 124. 40 
The operations or processes of the data storage region 
selecting function block 1 21 may be implemented by ex- 
ecution of the program from the storage medium 1 31 as 
shown in FIG. 18 and described in the sixth embodi- 
ment. In step S51, the data storage region selecting ^5 
function block 121 receives an entry of data 1211 and a 
network property value 1 21 2 from user. In step S52, the 
datastorage region selecting function block 121 also se- 
lects one of the datastorage regions 122, 123 and 124, 
wherein the selected one of the data storage regions so 
122, 123 and 124 has the same network property value 
as the user's designated network property value 1212 
received from user. The data storage region selecting 
function block 121 sends the data 1213 to the selected 
one of the data storage regions 122, 123 and 124 for S5 
storing the data 1213 therein. The access policy storage 
unit 1 25 stores not only a transmission policy but also a 
receiving policy. The transmission policy allows a deci- 



sion, based on the transmission policy, of the permission 
of transmission of the data stored in the data storage 
region 1 22, 1 23 or 1 24 to other data communication ter- 
minals over the data communication networks. The re- 
ceiving policy allows a decision, based on the receiving 
policy, of the permission of receipt of the data from other 
data communication terminals over the data communi- 
cation networks. 

[0229] The processes or operations shown by the da- 
ta transmission pemnisslon decision function block 126 
are implemented by execution of the program from the 
storage medium 1 31 as shown in FIG. 20 and as follows. 
With reference back to FIG. 20, In steps S61 and S62, 
the data transmission pemnission decision function 
block 1 26 is started upon receipt of a data transmission 
request 1214. In step S63, the data transmission per- 
mission decision function block 126 obtains respective 
network property values 1215 of the data storage re- 
gions 122, 123 and 124. In step S64, the data transmis- 
sion permission decision function block 126 reads out 
the transmission policy 1216 from the access policy 
storage unit 1 25. In step S65, the data transmission per- 
mission decision function block 126 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 
terminals as "receiver", to which the data transmission 
Is intended to be made, and also refers the network 
property value assigned to the data communication net- 
work connected with the present data communication 
terminal 120 as "sender", so that the data transmission 
permission decision function block 126 makes a deci- 
sion on the pennisslbllity of the data transmission based 
on the referred network property values. In step S66, If 
the data transmission pemnisslon decision function 
block 126 decides that the data transmission is permit- 
ted based on the transmission policy, then In step S67 
the data transmission pemnission decision function 
block 126 transfers the transmission data 1217 along 
with the network property value of the data storage re- 
gion 122, 123 or 124 stored the transmission data to the 
packet transmission function block 127 for requesting 
the packet transmission function block 127 to transmit 
the data and the header with the network property value, 
A transmission data packet 1218 is transmitted by the 
packet transmission function block 127 onto the data 
communication network assigned with the network 
property value of the data. 

[0230] If the data communication temninal as "send- 
er", from which the data are transmitted, is connected 
to plural data communication networks, the data trans- 
mission permission decision function block 126 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission is 
intended to be made. If the data communication terminal 
as "receiver", to which the data are transmitted, is con- 
nected to plural data communication networks, the data 
transmission permission decision function block 126 re- 
fers the network property value assigned to the data 
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communication networl<, via whicli the data transmis- 
sion as "receiver" is intended to receive the transmitted 
data. 

[0231] FIG. 25 Is a flow chart illustrative of a typical 
example of processes or operations shown by the data 5 
receiving permission decision function block included in 
the data communication terminal of FIG. 24. The proc- 
esses or operations shown by the data receiving per- 
mission decision function block 129 are implemented by 
execution of the program from the storage medium 131. io 
In step S81 , the packet receiving function block 128 re- 
ceives a packet 121 9. In step S82, the packet receiving 
function block 128 Isolates a transmission control head- 
er, a network property value and the data from the re- 
ceived packet 1 21 9. The packet receiving function block 
128 sends a set 1220 of the isolated transmission con- 
trol header, the network property value and the data to 
the data receiving pemilssion decision function block 
1 29. In step S83, the data receiving permission decision 
function block 129 specifies a "sender" data communi- 20 
cation temninal based on the received transmission con- 
trol header. In step S84, the data receiving pemnission 
decision function block 129 reads out the receiving pol- 
icy 1221 from the access policy storage unit 125. In step 
S85, the data receiving permission decision function 25 
block 129 refers a network property value which is as- 
signed to the data communication network connected 
with the "sender" data communication terminal, and also 
refers the network property value received from the 
packet receiving function block 128 as well as refers a 30 
network property value which is assigned to the data 
communication network connected with the present da- 
ta communication tenninal as "receiver", so that the data 
receiving pemnission decision function block 129 makes 
a decision on the pennissibility of the data receiving with 35 
reference to the above respective network property val- 
ues. In step S86, if the data receiving permission deci- 
sion function block 129 decides that the data transmis- 
sion is permitted based on the transmission policy then 
in step S87, the data receiving pennission decision tunc- 40 
tlon block 129 confirms whether two or more data stor- 
age regions are permitted to store the received data, or 
only one data storage region is pennitted is pennitted to 
store the received data. If only one data storage region 
is permitted is permitted to store the received data, then ^5 
In step S88, the data receiving pemiission decision func- 
tion block 129 sends the received data 1222 together 
with the network property value of the received data to 
the data storage region 1 22, 1 23 or 1 24 pennitted Is per- 
mitted to store the received data. 
[0232] If two or more data storage regions are permit- 
ted to store the received data, then in step S89, the data 
receiving permission decision function block 129 sends 
a lest of the two or more data storage regions pennitted 
to store the received data to the received data storage 55 
region selecting function block 130. In step S90, the re- 
ceived data storage region selecting function block 1 30 
infomris the user of the received list 1224 and the re- 



ceives a user's instruction 1225 from user. The received 
data storage region selecting function block 130 sends 
the user's instruction 1226 to the data receiving permis- 
sion decision function block 129, In step S91, the data 
receiving pennission decision function block 129 desig- 
nates one of the two or more data storage regions per- 
mitted to store the received data in accordance with the 
received user's instruction. The data receiving permis- 
sion decision function block 1 29 sends the received data 
1 222 together with the network property value of the re- 
ceived data to the designated one of the data storage 
regions 1 22, 1 23 and 1 24. If the sender data communi- 
cation terminal as "sender", from which the data are 
transmitted, is connected to plural data communication 
networks, the data transmission receiving decision func- 
tion block 129 refers the network property value as- 
signed to the data communication network, via which 
the data transmission was made. If the present data 
communication terminal as "receiver", to which the data 
were transmitted, Is connected to plural data communi- 
cation networks, the data transmission receiving deci- 
sion function block 129 refers the network property val- 
ue assigned to the data communication network, via 
which the present data transmission as "receiver'' re- 
ceives the transmitted data. 

NINTH EMBODIMENT 

[0233] A ninth embodiment according to the present 
invention will be described In detail with reference to the 
drawings. The ninth embodiment is applicableto the da- 
ta communication system shown in FIG. 1 and de- 
scribed In the first embodiment. FIG. 26 is a block dia- 
gram of an internal structure of the data communication 
terminal of the ninth embodiment In accordance with the 
present invention. A data communication terminal 140 
may include a data storage region selecting function 
block 141 , plural data storage regions 142, 1 43 and 1 44, 
an access policy storage unit 145, a data transmission 
permission decision function block 1 46, a packet trans- 
mission function block 147. a packet receiving function 
block 1 48, a data receiving permission decision function 
block 149, a network property value changing function 
block 1 50 and a storage medium 1 51 for storing one or 
more programs to be executed by the above respective 
function blocks. The storage medium 151 may be real- 
ized by any available storage means such as read only 
memory or integrated circuit memory. The number of the 
plural data storage regions may be three as shown by 
the reference numerals 142, 143 and 144 but should not 
be limited to three. In this embodiment, a plurality of data 
storage region is provided. 

[0234] In this embodiment, an additional provision of 
the network property value changing function block 150 
is different from the seventh embodiment. The data stor- 
age region selecting function block 141 is provided for 
adding a user-designated network property value to da- 
ta 1411 which have been entered by user of the data 
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communication temninal 1 40 for allowing the data 1 41 3 
together with the added network property value to be 
stored in the data storage regions 142, 143 and 144. 
The operations or processes of the data storage region 
seiecting function block 1 41 may be Implemented by ex- 
ecution of the program from the storage medium 161 as 
shown In FIG. 18 and described In the sixth embodi- 
ment. In step S51, the data storage region selecting 
function block 141 receives an entry of data 1411 and a 
network property value 141 2 from user. In step S52, the 
data storage region selecting function block 1 41 also se- 
lects one of the data storage regions 1 42, 1 43 and 1 44, 
wherein the selected one of the data storage regions 
1 42, 1 43 and 1 44 has the same network property value 
as the user's designated network property value 1412 
received from user. The data storage region selecting 
function block 141 sends the data 1413 to the selected 
one of the data storage regions 142, 143 and 144 for 
storing the data 1413 therein. The network property val- 
ue changing function block 150 is provided for changing 
the present network property value accompanied to the 
presently stored data In the data storage region 1 42, 1 43 
or 144 Into a user's designated new network property 
value. FIG, 27 is a flow chart of operations or processes 
of the network property value changing function block 
included in the data communication terminal of FIG. 26. 
The operations or processes of the network property 
value changing function block 150 are implemented by 
execution of the program from the storage medium 151. 
In step SI 01 , user of the data communication terminal 
140 may enter a designation 1423 for one of the data 
storage regions 142, 143, and 144 and a further desig- 
nation 1 424 for the new network property value into the 
network property value changing function block 150. In 
step S102, the network property value changing func- 
tion block 150 changes the present network property 
value assigned to the user's designated one of the data 
storage regions 142. 143 and 144 into the user's desig- 
nated new network property value 1425. The access 
policy storage unit 145 stores not only a transmission 
policy but also a receiving policy. The transmission pol- 
icy allows a decision, based on the transmission policy, 
of the permission of transmission of the data stored in 
the data storage region 142, 143 or 144 to other data 
communication terminals over the data communication 
networks. The receiving policy allows a decision, based 
on the receiving policy, of the pemiission of receipt of 
the data from other data communication tenninals over 
the data communication networks. 
[0235] The processes or operations shown by the da- 
ta transmission permission decision function block 1 46 
are Implemented by execution of the program from the 
storage medium 1 51 as shown in FIG. 20 and as follows. 
With reference back to FIG. 20, in steps S61 and S62, 
the data transmission permission decision function 
block 146 Is started upon receipt of a data transmission 
request 1414. In step S63, the data transmission per- 
mission decision function block 146 obtains respective 



network property values 1415 of the data storage re- 
gions 142, 143 and 144. In step S64, the data transmis- 
sion permission decision function block 146 reads out 
the transmission policy 1416 from the access policy 

5 storage unit 145. In step S65, the data transmission per- 
mission decision function block 146 refers the network 
property value assigned to the data communication net- 
work connected with one or more data communication 
tenninals as "receiver", to which the data transmission 

10 is intended to be made, and also refers the network 
property value assigned to the data communication net- 
work connected with the present data communication 
terminal 140 as "sender", so that the data transmission 
permission decision function block 146 makes a deci- 

is slon on the pennissibllity of the data transmission based 
on the referred network property values. In step S66, if 
the data transmission pemnisslon decision function 
block 146 decides that the data transmission is permit- 
ted based on the transmission policy, then in step S67 

20 the data transmission pemnisslon decision function 
block 146 transfers the transmission data 1417 along 
with the networic property value of the data storage re- 
gion 142, 143 or 144 stored the transmission data to the 
packet transmission function block 147 for requesting 

25 the packet transmission function block 1 47 to transmit 
the data and the header with the network property value. 
A transmission data packet 1418 Is transmitted by the 
packet transmission function block 147 onto the data 
communication network assigned with the networic 

30 property value of the data. 

[0236] If the data communication temninal as "send- 
er", from which the data are transmitted, Is connected 
to plural data communication networics, the data trans- 
mission pennission decision function block 146 refers 

35 the network property value assigned to the data com- 
munication network, via which the data transmission is 
Intended to be made. If the data communication terminal 
as "receiver", to which the data are transmitted, is con- 
nected to plural data communication networks, the data 

40 transmission permission decision function block 146 re- 
fers the network property value assigned to the data 
communication network, via which the data transmis- 
sion as "receiver" is intended to receive the transmitted 
data .The processes or operations shown by the data re- 

45 celving pemnisslon decision function block 149 are Im- 
plemented by execution of the program from the storage 
medium 151 which are described in the seventh embod- 
iment with reference to FIG. 23. In step S71 , the packet 
receiving function block 148 receives a packet 1419. In 

50 step S72, the packet receiving function block 148 iso- 
lates a transmission control header, a network property 
value and the data from the received packet 1419. The 
packet receiving function block 148 sends a set 1 420 of 
the isolated transmission control header, the network 

55 property value and the data to the data receiving per- 
mission decision function block 1 49. In step S73, the da- 
ta receiving permission decision function block 149 
specifies a "sender" data communication temiinal 
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based on the received transmission control header. In 
step S74, the data receiving permission decision func- 
tion blocl< 149 reads out the receiving policy 1421 from 
the access policy storage unit 1 45. In step S75, the data 
receiving permission decision function block 149 refers 
a network property value which is assigned to the data 
communication network connected with the "sender" 
data communication terminal, and also refers the net- 
work property value received from the packet receiving 
function block 148 as well as refers a network property 
value which Is assigned to the data communication net- 
work connected with the present data communication 
terminal as "receiver", so that the data receiving pernils- 
slon decision function block 149 makes a decision on 
the pemnissibility of the data receiving with reference to 
the above respective network property values. In step 
S76, if the data receiving pemiission decision function 
block 149 decides that the data receiving Is permitted 
based on the receiving policy, then in step S77, the data 
receiving permission decision function block 149 sends 
the received data 1422 together with the network prop- 
erty value of the received data to the data storage region 
1 42, 1 43 or 1 44. If the sender data communication ter- 
minal as "sender", from which the data are transmitted, 
is connected to plural data communication networks, the 
data transmission receiving decision function block 1 49 
refers the network property value assigned to the data 
communication network, via which the data transmis- 
sion was made. If the present data communication ter- 
minal as "receiver", to which the data were transmitted, 
is connected to plural data communication networks, the 
data transmission receiving decision function block 1 49 
refers the network property value assigned to the data 
communication network, via which the present data 
transmission as "receiver" receives the transmitted da- 
ta. The difference of this embodiment from the seventh 
embodiment may also be applicable to the above first 
and second embodiments, so as to modify the data com- 
munication terminals of the sixth and eighth embodi- 
ments in accordance with this ninth embodiment. 

TENTH EMBODIMENT: 

[0237] A tenth embodiment according to the present 
Invention will be described in detail with reference to the 
drawings. The tenth embodiment is applicable to the da- 
ta communication system shown in FIG. 1 and de- 
scribed In the first embodiment. FIG. 28 is a block dia- 
gram of an Internal structure of the data communication 
terminal of the tenth embodiment in accordance with the 
present invention. A data communication temninal 160 
may include a data storage region selecting function 
block 1 61 , plural data storage regions 1 62, 1 63 and 1 64, 
an access policy storage unit 165, a data transmission 
permission decision function block 166, a packet trans- 
mission function block 167, a packet receiving function 
block 1 68, a data receiving permission decision function 
block 1 69, an access policy changing function block 1 70 



and a storage medium 1 71 for storing one or more pro- 
grams to be executed by the above respective function 
blocks. The storage medium 1 71 may be realized by any 
available storage means such as read only memory or 
5 integrated circuit memory. The number of the plural data 
storage regions may be three as shown by the reference 
numerals 1 62, 1 63 and 1 64 but should not be limited to 
three. In this embodiment, a plurality of data storage re- 
gion is provided. 
10 [0238] In this embodiment, an additional provision of 
the access policy changing function block 170 is differ- 
ent from the seventh embodiment. The data storage re- 
gion selecting function block 1 61 Is provided for adding 
a user-designated network property value to data 1611 
15 which have been entered by user of the data communi- 
cation terminal 160 for allowing the data 1613 together 
with the added network property value to be stored in 
the data storage regions 162, 163 and 164. The opera- 
tions or processes of the data storage region selecting 
20 function block 1 61 may be implemented by execution of 
the program from the storage medium 171 as shown in 
FIG. 18 and described in the sixth embodiment. In step 
S51 , the data storage region selecting function block 
1 61 receives an entry of data 1611 and a network prop- 
25 erty value 1612 from user. In step S52, the data storage 
region selecting function block 161 also selects one of 
the data storage regions 1 62, 1 63 and 1 64, wherein the 
selected one of the data storage regions 162, 163 and 
1 64 has the same network property value as the user's 
30 designated network property value 1612 received from 
user. The data storage region selecting function block 
1 61 sends the data 1 61 3 to the selected one of the data 
storage regions 162, 163 and 164 for storing the data 
1613 therein. 

35 [0239] The access policy storage unit 1 65 stores not 
only a transmission policy but also a receiving policy. 
The transmission policy allows a decision, based on the 
transmission policy, of the permission of transmission of 
the data stored in the data storage region 162, 163 or 
40 1 64 to other data communication terminals over the data 
communication networks. The receiving policy allows a 
decision, based on the receiving policy, of the permis- 
sion of receipt of the data from other data communica- 
tion tenninals over the data communication networks. 
45 The access policy changing function block 1 70 changes 
or replaces the present access policy, for example, at 
least one of the transmission policy and the receiving 
policy stored in the access policy storage unit 1 65 Into 
a new access policy 1 624, for example, at least one of 
50 a new transmission policy 1 624 and a new receiving pol- 
icy 1624 which are designated by the user. 
[0240] FIG. 29 Is a flow chart of operations or proc- 
esses of the access policy changing function block In- 
cluded in the data communication terminal of FIG, 28. 
55 Theoperationsorprocesses of the access policy chang- 
ing function block 170 are Implemented by execution of 
the program from the storage medium 171. In steps 
S111 , user of the data communication temiinal 50 may 
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enter a new access policy 1623, for example, at least 
one of a new transnnlsslon policy 1623 and a new re- 
ceiving policy 1623 into tlie access policy changing 
function block 170. In step S1 12, if the entered new ac- 
cess policy 1623 is a user's designated new transmis- 
sion policy 1623, then in step S113, the access policy 
changing function block 170 changes or replaces the 
present transmission policy stored in the access policy 
storage unit 165 Into the user's designated new trans- 
mission policy 1624. If the entered new access policy 
1623 is a user's designated new receiving policy 1623, 
then In step S114, the access policy changing function 
block 170 changes or replaces the present receiving 
policy stored in the access policy storage unit 165 into 
the user's designated new receiving policy 1624. The 
processes or operations shown by the data transmis- 
sion pennission decision function block 166 are imple- 
mented by execution of the program from the storage 
medium 171 as shown in FIG. 20 and as follows. With 
reference back to FIG. 20, in steps S61 and S62, the 
data transmission permission decision function block 
166 Is started upon receipt of a data transmission re- 
quest 1614. In step S63, the data transmission pennis- 
sion decision function block 166 obtains respective net- 
work property values 1616 of the data storage regions 
162, 163 and 164. In step S64, the data transmission 
pennission decision function block 166 reads out the 
transmission policy 1 61 6 from the access policy storage 
unit 165. In step S65, the data transmission pennission 
decision function block 166 refers the network property 
value assigned to the data communication network con- 
nected with one or more data communication temninals 
as "receiver", to which the data transmission Is Intended 
to be made, and also refers the network property value 
assigned to the data communication network connected 
with the present data communication terminal 160 as 
"sender", so that the data transmission pennission de- 
cision function block 166 makes a decision on the per- 
missibility of the data transmission based on the referred 
network property values. In step S66, if the data trans- 
mission pemnlssion decision function block 1 66 decides 
that the data transmission Is pennltted based on the 
transmission policy, then in step S67 the data transmis- 
sion permission decision function block 166 transfers 
the transmission data 1 61 7 along with the network prop- 
erty value of the data storage region 162, 163 or 164 
stored the transmission data to the packet transmission 
function block 167 for requesting the packet transmis- 
sion function block 167 to transmit the data and the 
header with the network property value. A transmission 
data packet 1 61 8 is transmitted by the packet transmis- 
sion function block 167 onto the data communication 
network assigned with the network property value of the 
data. If the data communication temninal as "sender", 
from which the data are transmitted, is connected to plu- 
ral data communication networks, the data transmission 
pennission decision function block 166 refers the net- 
work property value assigned to the data communica- 



tion network, via which the data transmission Is intended 
to be made. If the data communication terminal as "re- 
ceiver", to which the data are transmitted, is connected 
to plural data communication networks, the data trans- 

5 mission pennission decision function block 166 refers 
the network property value assigned to the data com- 
munication network, via which the data transmission as 
"receiver" is Intended to receive the transmitted data. 
The processes or operations shown by the data receiv- 

10 ing pennission decision function block 169 are imple- 
mented by execution of the program from the storage 
medium 1 71 which are described In the seventh embod- 
iment with reference to FIG. 23. In step S71 , the packet 
receiving function block 1 68 receives a packet 1 619. In 

15 step S72, the packet receiving function block 168 iso- 
lates a transmission control header, a network properly 
value and the data from the received packet 1 61 9. The 
packet receiving function block 1 68 sends a set 1 620 of 
the isolated transmission control header, the network 

20 property value and the data to the data receiving per- 
mission decision function block 1 69. In step S73, the da- 
ta receiving permission decision function block 169 
specifies a "sender" data communication terminal 
based on the received transmission control header. In 

25 step S74, the data receiving permission decision func- 
tion block 169 reads out the receiving policy 1621 from 
the access policy storage unit 1 65. In step S75, the data 
receiving pennission decision function block 169 refers 
a network property value which is assigned to the data 

30 communication network connected with the "sender" 
data communication tenninal, and also refers the net- 
work property value received from the packet receiving 
function block 168 as well as refers a network property 
value which is assigned to the data communication net- 

35 work connected with the present data communication 
terminal as "receiver", so that the data receiving permis- 
sion decision function block 1 69 makes a decision on 
the pennisslbility of the data receiving with reference to 
the above respective network property values. In step 

40 S76, if the data receiving permission decision function 
block 169 decides that the data receiving is pennitted 
based on the receiving policy, then In step S77, the data 
receiving pemnlssion decision function block 169 sends 
the received data 1 622 together with the network prop- 

45 erty value of the received datatothe datastorage region 
162, 163 or 164. If the sender data communication ter- 
minal as "sender", from which the data are transmitted, 
is connected to plural data communication networks, the 
data transmission receiving decision function block 169 

50 refers the network property value assigned to the data 
communication network, via which the data transmis- 
sion was made. If the present data communication ter- 
minal as "receiver", to which the data were transmitted, 
is connectedto plural data communication networks, the 

55 data transmission receiving decision function block 1 69 
refers the network property value assigned to the data 
communication network, via which the present data 
transmission as "receiver" receives the transmitted da- 
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ta. The difference of this embodiment from the seventh 
embodiment may also be applicable to the above sixth, 
eighth and ninth embodiments, so as to modify the data 
communication temriinals of the sixth, eighth and ninth 
embodiments in accordance with this tenth embodi- 
ment. 

ELEVENTH EMBODIMENT: 

[0241] An eleventh embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The eleventh embodiment is ap- 
plicable to the data communication system shown in 
FIG. 1 and described In the first embodiment. FIG. 30 is 
a block diagram of an internal structure of the data com- 
munication terminal of the eleventh embodiment in ac- 
cordance with the present invention. A data communi- 
cation terminal 1 80 may include a network property val- 
ue addition function block 181, a data storage region 
1 82, an access policy storage unit 1 83, a data transmis- 
sion pemiission decision function block 184, a packet 
transmission function block 1 85, an alarm function block 
1 86 and a storage medium 1 87 for storing one or more 
programs to be executed by the above respective func- 
tion blocks. The storage medium 187 may be realized 
by any available storage means such as read only mem- 
ory or integrated circuit memory. 
[0242] In this embodiment, an additional provision of 
the alarm function block 186 is different from the first 
embodiment. The network property value addition func- 
tion block 1 81 is provided for adding a user-designated 
network property value to data 1811 which have been 
entered by user of the data communication tennlnal 1 80 
for allowing the data 1812 together with the added net- 
work property value to be stored in the data storage re- 
gion 182. The operations or processes of the network 
property value addition function block 181 may be Im- 
plemented by execution of the program from the storage 
medium 1 87, which have been described above. In step 
S11 , the network property value addition function block 
1 81 receives an entry of the data from user with a re- 
quest for storing the data into the data storage region 
182. In step S12, the network property value addition 
function block 181 also receives a designation 1818 of 
the network property value from the user. In step SI 3, 
the network property value addition function block 1 81 
adds the user-designated network property value to the 
data, and sends the data 1 81 2 with the user-designated 
network property value to the data storage region 1 82 
for storing the same. The data storage region 1 82 stores 
the data and the network property values added by the 
network property value addition function block 1 81 . The 
access policy storage unit 183 stores an access policy 
or a transmission policy for allowing a decision, based 
on the transmission policy, of the pennisslon of trans- 
mission of the data stored in the data storage region 182 
to other data communication terminals over the data 
communication networks. 



[0243] FIG. 31 Is a flow chart of processes or opera- 
tions shown by the data transmission pemiission deci- 
sion function block of the data communication terminal 
of FIG. 30. The processes or operations shown by the 
5 data transmission permission decision function block 
1 84 are implemented by execution of the program from 
the storage medium 187. In steps SI 21 and SI 22, the 
data transmission permission decision function block 
184 is started upon receipt of a data transmission re- 
quest 1 813. In step SI 23, the data transmission permis- 
sion decision function block 184 retrieves the transmis- 
sion data from the data storage region 1 82 and obtains 
the network property value added to the retrieved trans- 
mission data 1814. In step S124, the data transmission 
permission decision function block 184 reads out the 
transmission policy 1 81 5 from the access policy storage 
unit 1 83. In step SI 25, the data transmission permission 
decision function block 184 refers the network property 
value assigned to the data communication network con- 
nected with one or more data communication terminals, 
to which the data transmission is Intended to be made, 
and also refers the network property value assigned to 
the data communication network connected with the 
present data communication terminal 180, so that the 
data transmission pemiission decision function block 
1 84 makes a decision on the permissibility of the data 
transmission based on the referred network property 
values. In steps 126, if the data transmission permission 
decision function block 1 84 decides that the data trans- 
mission Is pemiitted based on the transmission policy, 
then in step S7 the data transmission permission deci- 
sion function block 184 transfers the transmission data 

1 81 6 along with the network property value added to the 
transmission data to the packet transmission function 
block 185 for requesting the packet transmission func- 
tion block 1 85 to transmit the data and the header with 
the network property value. A transmission data packet 

1 81 7 is transmitted by the packet transmission function 
block 185 onto the data communication network as- 
signed with the network property value of the data. If the 
data transmission pemnission decision function block 
1 84 does not permit the data transmission, then in step 
SI 28, the data transmission permission decision func- 
tion block 1 84 infomris the alarm function block 1 86 that 
the data transmission is not permitted. The alami func- 
tion block 186 Informs the user that the data transmis- 
sion Is not pennltted. The difference of this embodiment 
from the first embodiment may also be applicable to the 
above second to tenth embodiments, so as to modify 
the data communication terminals of the second to tenth 
embodiments in accordance with this eleventh embod- 
iment. 

TWELFTH EMBODIMENT: 

[0244] A twelfth embodiment according to the present 
Invention will be described In detail with reference to the 
drawings. The twelfth embodiment Is applicable to the 
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data communication system shown in FIG. 1 and de- 
scribed in the first embodiment. FIG. 32 Is a block dia- 
gram of an internal structure of the data communication 
terminal of the twelfth embodiment in accordance with 
the present invention. A data communication temrilnal 
1 90 may include a network property value addition func- 
tion block 191, a data storage region 192, an access 
policy storage unit 193, a data transmission permission 
decision function block 1 94, a packet transmission func- 
tion block 195, a packet receiving function block 196, a 
data receiving permission decision function block 197, 
a data receiving pemnission decision request function 
block 1 98 and a storage medium 1 99 for storing one or 
more programs to be executed by the above respective 
function blocks. The storage medium 199 may be real- 
ized by any available storage means such as read only 
memory or integrated circuit memory. 
[0245] In this embodiment, an additional provision of 
the data receiving permission decision request function 
block 198 as well as modification to the operations of 
the data receiving pennission decision function block 
197 are different from the third embodiment. The net- 
work property value addition function block 191 is pro- 
vided for adding a determined network property value 
to data 1911 which have been entered by user of the 
data communication terminal 190 for allowing the data 
1912 together with the added network property value to 
be stored In the data storage region 1 92. 
[0246] The data storage region 192 stores the data 
and the network property values added by the network 
property value addition function block 21 . The access 
policy storage unit 193 stores not only a transmission 
policy but also a receiving policy. The transmission pol- 
icy allows a decision, based on the transmission policy, 
of the permission of transmission of the data stored in 
the data storage region 192 to other data communica- 
tion terminals over the data communication networks. 
The receiving policy allows a decision, based on the re- 
ceiving policy, of the pennission of receipt of the data 
from other data communication terminals over the data 
communication networks. The processes or operations 
shown by the data transmission permission decision 
function block 1 94 are Implemented by execution of the 
program from the storage medium 1 99 as shown In FIG. 
5 and described In the first embodiment. With reference 
back to FIG. 5, in steps SI and S2, the data transmission 
pemnission decision function block 194 is started upon 
receipt of a data transmission request 1 91 3. In step S3, 
the data transmission pemnission decision function 
block 1 94 retrieves the transmission data from the data 
storage region 192 and obtains the network property 
value added to the retrieved transmission data 1914. In 
step 84, the data transmission pennission decision 
function block 194 reads out the transmission policy 
1915 from the access policy storage unit 193. In step 
S5, the data transmission permission decision function 
block 1 94 refers the network property value assigned to 
the data communication network connected with one or 



more data communication tenninals, to which the data 
transmission is intended to be made, and also refers the 
network property value assigned to the data communi- 
cation network connected with the present data commu- 
5 nication terminal 1 90, so that the data transmission per- 
mission decision function block 194 makes a decision 
on the permissibility of the data transmission based on 
the referred network property values. In step S6, if the 
data transmission pennission decision function block 
10 194 decides that the data transmission Is pemnitted 
based on the transmission policy, then In step S7 the 
data transmission permission decision function block 
1 94 transfers the transmission data 1916 along with the 
network property value added to the transmission data 
IS to the packet transmission function block 195 for re- 
questing the packet transmission function block 195 to 
transmit the data and the header with the network prop- 
erty value. A transmission data packet 1 91 7 is transmit- 
ted by the packet transmission function block 1 95 onto 
the data communication network assigned with the net- 
work property value of the data. If the data communica- 
tion terminal as "sender", from which the data are trans- 
mitted, is connected to plural data communication net- 
works, the data transmission permission decision func- 
tion block 194 refers the network property value as- 
signed to the data communication network, via which 
the data transmission is intended to be made. If the data 
communication terminal as "receiver", to which the data 
are transmitted, is connected to plural data communica- 
tion networks, the data transmission permission deci- 
sion function block 194 refers the network property val- 
ue assigned to the data communication network, via 
which the data transmission as "receiver" is Intended to 
receive the transmitted data. 

[0247] FIG, 33 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included In 
the data communication terminal of FIG. 32. The proc- 
esses or operations shown by the data receiving per- 
mission decision function block 1 97 are Implemented by 
execution of the program from the storage medium 1 99. 
In step S131, the packet receiving function block 196 
receives a packet 1 91 8. In step SI 32, the packet receiv- 
ing function block 196 isolates a transmission control 
header, a network property value and the data from the 
received packet 1918. The packet receiving function 
block 1 96 sends a set 1 91 9 of the isolated transmission 
control header, the network property value and the data 
to the data receiving permission decision function block 
197. In step SI 33, the data receiving pennission deci- 
sion function block 1 97 specifies a "sender" data com- 
munication temninal based on the received transmission 
control header. In step S1 34, the data receiving permis- 
sion decision function block 197 reads out the receiving 
policy 1920 from the access policy storage unit 193. In 
step SI 35, the data receiving permission decision func- 
tion block 197 refers a network property value which is 
assigned to the data communication network connected 
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with the "sender" data communication terminal, and also 
refers the network property value received from the 
packet receiving function block 1 96, so that the data re> 
celving permission decision function block 1 97 makes 
a decision on the pennissibility of the data receiving with s 
reference to the above both network property values. In 
step S136, if the data receiving pennission decision 
function block 1 97 decides that the data receiving is per- 
mitted based on the receiving policy 1920, then In step 
S137, the data receiving permission decision function io 
block 197 sends the received data 1921 together with 
the network property value of the received data to the 
data storage region 1 92. if in step S1 36 the data receiv- 
ing permission decision function block 1 97 decides that 
the data receiving Is not pemnitted based on the receiv- 
ing policy 1920, then In step S138, the data receiving 
permission decision function block 197 sends the data 
receiving permission decision request function block 
198 an information 1922 to the effect that the data re- 
ceiving is not pemnltted. I n step SI 39, the data receiving 20 
permission decision request function block 198 sends 
user an Information 1 923 to the effect that the data re- 
ceiving is not permitted. The data receiving permission 
decision request function block 198 receives an user's 
instruction 1 924. In step SI 40, if the received user's in- 25 
struction 1924 is to permit the data receiving, then the 
data receiving permission decision request function 
block 1 98 sends the user's instruction to the data receiv- 
ing permission decision function block 197, so that the 
data receiving pemnlsslon decision function block 197 30 
sends the received data 1 921 together with the network 
property value of the received data to the data storage 
region 1 92. If, however, the received user's instruction 
1924 is not to permit the data receiving, then the data 
receiving pennission decision request function block 35 
198 sends the user's instruction to the data receiving 
permission decision function block 1 97, so that the data 
receiving pennission decision function block 197 does 
not send the received data 1921 together with the net- 
work property value of the received data to the data stor- 40 
age region 1 92. If the sender data communication ter- 
minal as "sender", from which the data are transmitted, 
Is connected to plural data communication networks, the 
data transmission receiving decision function block 1 97 
refers the network property value assigned to the data 45 
communication network, via which the data transmis- 
sion was made. If the present data communication ter- 
minal as "receiver", to which the data were transmitted, 
Is connected to plural data communication networks, the 
data transmission receiving decision function block 1 97 
refers the network property value assigned to the data 
communication network, via which the present data 
transmission as "receiver" receives the transmitted da- 
ta. The difference of this embodiment from the third em- 
bodiment may also be applicable to the fourth and fifth ss 
embodiments, so as to modify the data communication 
terminal of the fourth and fifth embodiments in accord- 
ance with this twelfth embodiment. 



THIRTEENTH EMBODIMENT 

[0248] An thirteenth embodiment according to the 
present Invention will be described in detail with refer- 
ence to the drawings. The thirteenth embodiment Is ap- 
plicable to the data communication system shown In 
FIG. 1 and described in the first embodiment. The data 
communication terminal of this embodiment has the 
same structure as the eighth embodiment shown in FIG. 
24. A data communication tenninal 120 may include a 
data storage region selecting function block 121 , plural 
data storage regions 1 22, 1 23 and 1 24, an access policy 
storage unit 125, a data transmission permission deci- 
sion function block 126, a packet transmission function 
block 127, a packet receiving function block 128, a data 
receiving permission decision function block 129, a re- 
ceived data storage region selecting function block 130 
and a storage medium 131 for storing one or more pro- 
grams to be executed by the above respective function 
blocks. The storage medium 1 31 may be realized by any 
available storage means such as read only memory or 
integrated circuit memory. The number of the plural data 
storage regions may be three as shown by the reference 
numerals 82, 83 and 84 but should not be limited to 
three. In this embodiment, a plurality of data storage re- 
gion is provided. 

[0249] In this embodiment, modifications in operation 
of the data receiving permission decision function block 
1 29 and the received data storage region selecting func- 
tion block 1 30 are different from the eighth embodiment. 
The data storage region selecting function block 121 is 
provided for adding a user-designated network property 
value to data 1211 which have been entered by user of 
the data communication terminal 120 for allowing the 
data 1 21 3 together with the added network property val- 
ue to be stored in the data storage regions 1 22, 1 23 and 
124. The operations or processes of the data storage 
region selecting function block 121 may be Implemented 
by execution of the program from the storage medium 
131 as shown In FIG. 1 8 and described In the sixth em- 
bodiment. In step 851 , the data storage region selecting 
function block 121 receives an entry of data 1211 and a 
network property value 1212 from user. In step 852, the 
data storage region selecting function block 121 also se- 
lects one of the data storage regions 122, 123 and 124, 
wherein the selected one of the data storage regions 
1 22, 1 23 and 1 24 has the same network property value 
as the user's designated network property value 1212 
received from user. The data storage region selecting 
function block 121 sends the data 1213 to the selected 
one of the data storage regions 122, 123 and 124 for 
storing the data 1213 therein. The access policy storage 
unit 125 stores not only a transmission policy but also a 
receiving policy. The transmission policy allows a deci- 
sion, based on the transmission policy, of the permission 
of transmission of the data stored in the data storage 
region 1 22, 1 23 or 1 24 to other data communication ter- 
minals over the data communication networks. The re- 
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ceiving policy allows a decision, based on the receiving 
policy, of the peimission of receipt of the data from other 
data communication temilnals over the data communi- 
cation networks. The processes or operations shown by 
the data transmission permission decision function 
block 1 26 are Implemented by execution of the program 
from the storage medium 131 as shown in FIG. 20 and 
as follows. With reference back to FIG. 20, in steps S61 
and S62, the data transmission permission decision 
function block 1 26 is started upon receipt of a data trans- 
mission request 1214. In step S63, the data transmis- 
sion permission decision function block 126 obtains re- 
spective network property values 1215 of the data stor- 
age regions 122. 123 and 124. In step S64, the data 
transmission permission decision function block 126 
reads out the transmission policy 1216 from the access 
policy storage unit 125. In step S65, the data transmis- 
sion pennission decision function block 126 refers the 
network property value assigned to the data communi- 
cation network connected with one or more data com- 
munication terminals as "receiver", to which the data 
transmission is intended to be made, and also refers the 
network property value assigned to the data communi- 
cation network connected with the present data commu- 
nication terminal 120 as "sender", so that the data trans- 
mission permission decision function block 126 makes 
a decision on the pennlssibillty of the data transmission 
based on the referred network property values. In step 
S66, if the data transmission pennission decision func- 
tion block 1 26 decides that the data transmission is per- 
mitted based on the transmission policy, then in step 
S67 the data transmission pennission decision function 
block 126 transfers the transmission data 1217 along 
with the network property value of the data storage re- 
gion 122, 123 or 124 stored the transmission data to the 
packet transmission function block 127 for requesting 
the packet transmission function block 127 to transmit 
the data and the header with the network property value. 
A transmission data packet 1218 is transmitted by the 
packet transmission function block 127 onto the data 
communication network assigned with the network 
property value of the data, if the data communication 
terminal as "sender", from which the data are transmit- 
ted, is connected to plural data communication net- 
works, the data transmission permission decision func- 
tion block 126 refers the network property value as- 
signed to the data communication network, via which 
the data transmission is intended to be made. If the data 
communication terminal as "receiver", to which the data 
are transmitted, is connected to plural data communica- 
tion networks, the data transmission pennission deci- 
sion function block 1 26 refers the network property val- 
ue assigned to the data communication network, via 
which the data transmission as "receiver" Is intended to 
receive the transmitted data. 

[0250] FIG. 34 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving permission decision function block included in 



the data communication terminal of FIG. 24. The proc- 
esses or operations shown by the data receiving per- 
mission decision function block 129 are implemented by 
execution of the program from the storage medium 1 31 . 

5 In step SI 41, the packet receiving function block 128 
receives a packet 1 21 9. In step S1 42, the packet receiv- 
ing function block 128 isolates a transmission control 
header, a network property value and the data from the 
received packet 1219. The packet receiving function 

10 block 1 28 sends a set 1 220 of the Isolated transmission 
control header, the network property value and the data 
to the data receiving permission decision function block 
129. In step SI 43, the data receiving pennission deci- 
sion function block 129 specifies a "sender data com- 

15 munlcatlon tennlnal based on the received transmission 
control header. In step SI 44, the data receiving permis- 
sion decision function block 129 reads out the receiving 
policy 1221 from the access policy storage unit 125. In 
step SI 45, the data receiving pennission decision func- 

20 tion block 1 29 refers a network property value which is 
assigned to the data communication network connected 
with the "sender" data communication tenninal, and also 
refers the network property value received from the 
packet receiving function block 128 as well as refers a 

25 network property value which is assigned to the data 
communication network connected with the present da- 
ta communication tennlnal as "receiver", so that the data 
receiving pennission decision function block 1 29 makes 
a decision on the permissibility of the data receiving with 

30 reference to the above respective network property val- 
ues. In step S146, if the data receiving permission de- 
cision function block 1 29 decides that the data receiving 
is pennitted based on the receiving policy, then in step 
S147, the data receiving pennission decision function 

35 block 129 sends the received data 1222 together with 
the network property value of the received data to the 
data storage region 122, 123 or 124. If, however, the 
data receiving pennission decision function block 129 
decides that the data receiving Is not permitted based 

40 on the receiving policy 1 221 , then in step SI 48, the data 
receiving permission decision function block 129 sends 
the received data storage region selecting function 
block 130 an information 1223 that the data receiving is 
not pennitted. In step SI 49, the received data storage 

45 region selecting function block 1 30 sends user an infor- 
mation 1224 that the data receiving is not pennitted. The 
received data storage region selecting function block 
130 receives an user's instruction 1225. The data re- 
ceiving permission decision function block 129 receives 

50 an user's instruction 1226 from the received data stor- 
age region selecting function block 130. In step SI 60, if 
the received user's instruction 1 226 is to pe'nnlt the data 
receiving, then the data receiving pennission decision 
function block 1 29 sends the received data 1 222 togeth- 

55 er with the network property value of the received data 
to user's designated one of the data storage regions 
122, 123 and 124. Ifthe sender data communication ter- 
minal as "sender", from which the data are transmitted, 
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is connected to plural data connmunication networks, the 
data transmission receiving decision function block 129 
refers the network property value assigned to the data 
communication network, via which the data transmis- 
sion was made. If the present data communication ter- 
minal as "receiver", to which the data were transmitted, 
Isconnectedto plural data communication networks, the 
data transmission receiving decision function block 1 29 
refers the network property value assigned to the data 
communication network, via which the present data 
transmission as "receiver" receives the transmitted da- 
ta. The difference of this embodiment from the eighth 
embodiment may also be applicable to the ninth and 
tenth embodiments, so as to modify the data communi- 
cation tenninal of the ninth and tenth embodiments in 
accordance with this thirteenth embodiment. 

FOURTEENTH EMBODIMENT: 

[0251] A fourteenth embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The fou rteenth embodiment is ap- 
plicable to the data communication system shown in 
FIG. 1 and described in the first embodiment. FIG. 35 is 
a block diagram of an internal structure of the data com- 
munication tenninal ofthefourteenth embodiment in ac- 
cordance with the present invention. A data communi- 
cation terminal 200 may include a network property val- 
ue addition function block 201 , a data storage region 
202, an access policy storage unit 203, a data transmis- 
sion permission decision function block 204, a packet 
transmission function block 205, a data transmission 
permission decision request function block 206 and a 
storage medium 207 for storing one or more programs 
to be executed by the above respective function blocks. 
The storage medium 207 may be realized by any avail- 
able storage means such as read only memory or inte- 
grated circuit memory. 

[0252] In this embodiment, an additional provision of 
the data transmission permission decision request func- 
tion block 206 and a modification to the operation of the 
data transmission pemnission decision function block 
204 are different from the first embodiment. The network 
property value addition function block 201 is provided 
for adding a user-designated network property value to 
data 201 1 which have been entered by user of the data 
communication tennina! 200 for allowing the data 2012 
together with the added network property value to be 
stored in the data storage region 202. The operations 
or processes of the network property value addition 
function block 201 may be Implemented by execution of 
the program from the storage medium 207, which are 
described in the second embodiment with reference to 
FIG. 8. In step S11 , the network property value addition 
function block 201 receives an entry of the data from 
user with a request for stori ng the data into the data stor- 
age region 202. In step SI 2, the network property value 
addition function block 201 also receives a designation 



of the network property value from the user. In step S13, 
the network property value addition function block 201 
adds the user-designated network property value to the 
data, and sends the data 201 2 with the user-designated 

5 network property value to the data storage region 202 
for storing the same. The data storage region 202 stores 
the data and the network property values added by the 
network property value addition function block 201 . The 
access policy storage unit 203 stores an access policy 

10 or a transmission policy for allowing a decision, based 
on the transmission policy, of the pennisslon of trans- 
mission of the data stored in the data storage region 202 
to other data communication terminals over the data 
communication networks. 

15 [0253] FIG . 36 Is a flow chart of operations of the data 
transmission permission decision function block includ- 
ed in the data communication terminal of FIG. 35. The 
processes or operations shown by the data transmis- 
sion permission decision function block 204 are imple- 

20 mented by execution of the program from the storage 
medium 207. In steps SI 61 and S162, the data trans- 
mission pemnission decision function block 204 is start- 
ed upon receipt of a data transmission request 20 1 3. 1 n 
step S163, the data transmission pemnission decision 

25 function block 204 retrieves the transmission data from 
the data storage region 202 and obtains the network 
property value added to the retrieved transmission data 

2014. In step S164, the data transmission pemnission 
decision function block 204 reads out the transmission 

30 policy 201 5 from the access policy storage unit 203. In 
step 8165, the data transmission permission decision 
function block 204 refers the network property value as- 
signed to the data communication network connected 
with one or more data communication tenninals, to 

35 which the data transmission is intended to be made, and 
also refers the network property value assigned to the 
data communication network connected with the 
present data communication temninal 200, so that the 
data transmission permission decision function block 

40 204 makes a decision on the permissibility of the data 
transmission based on the referred network property 
values. lnstepS166, if the data transmission permission 
decision function block 204 decides that the data trans- 
mission is pennltted based on the transmission policy 

45 2015, then In step SI 67 the data transmission permis- 
sion decision function block 204 transfers the transmis- 
sion data 2016 along with the network property value 
added to the transmission data to the packet transmis- 
sion function block 205 for requesting the packet trans- 

50 mission function block 205 to transmit the data and the 
header with the network property value. A transmission 
data packet 201 7 is transmitted by the packet transmis- 
sion function block 205 onto the data communication 
network assigned with the network property value of the 

55 data. If, however, the data transmission pennlssion de- 
cision function block 204 decides that the data transmis- 
sion is not pemnitted based on the transmission policy 

2015, then in step SI 68 the data transmission permis- 
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sion decision function block 204 sends the data trans- 
mission pennission decision request function blocl<206 
an information 201 8 to the effect that the data transmis- 
sion is not permitted. In step S169, the data transmis- 
sion permission decision request function block 206 
sends user an information 201 9 to the effect that the da- 
ta transmission is not permitted. The data transmission 
pennission decision request function block206 receives 
an user's Instruction 2020. In step SI 70, if the user's 
instruction 2020 Is to transmit the data, then in step 
SI 67, the data transmission pennission decision re- 
quest function block 206 sends the data transmission 
pennission decision function block 204 the received us- 
er's Instruction 2021 . The data transmission pennission 
decision function block 204 transfers the transmission 
data 201 6 along with the network property value added 
to the transmission data to the packet transmission func- 
tion block 205 for requesting the packet transmission 
function block 205 to transmit the data and the header 
with the network property value. A transmission data 
packet 2017 is transmitted by the packet transmission 
function block 205 onto the data communication net- 
work assigned with the network property value of the 
data. The difference of this embodiment from the first 
embodiment may also be applicable to the second to 
thirteenth embodiments, so as to modify the data com- 
munication terminal of the second to thirteenth embod- 
iments in accordance with this fourteenth embodiment. 

FIFTEENTH EMBODIMENT: 

[0254] A fifteenth embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The fifteenth embodiment is ap- 
plicable to the data communication system shown in 
FIG. 1 and described In the first embodiment. FIG. 37 is 
a block diagram of an internal structure of the data com- 
munication temriinal of the fifteenth embodiment in ac- 
cordance with the present invention. A data communi- 
cation terminal 220 may include a network property val- 
ue addition function block 221 , a data storage region 
222, an access policy storage unit 223, a data transmis- 
sion pennission decision function block 224, a packet 
transmission function block 225, a data transmission 
permission decision request function block 226 and a 
storage medium 227 for storing one or more programs 
to be executed by the above respective function blocks. 
The storage medium 227 may be realized by any avail- 
able storage means such as read only memory or Inte- 
grated circuit memory. 

[0255] In this embodiment, modifications to the re- 
spective operations of the access policy storage unit 
223 and the data transmission permission decision 
function block 224 are different from the fourteenth em- 
bodiment The network property value addition function 
block 221 is provided for adding a user-designated net- 
work property value to data 2211 which have been en- 
tered by user of the data communication terminal 220 



for allowing the data 2212 together with the added net- 
work property value to be stored in the data storage re- 
gion 222. The operations or processes of the network 
property value addition function block 221 may be Im- 

5 plemented by execution of the program from the storage 
medium 227, which are described in the second embod- 
iment with reference to FIG. 8. In step S11 , the network 
property value addition function block 221 receives an 
entry of the data from user with a request for storing the 

10 data into the data storage region 222. In step SI 2, the 
network property value addition function block 221 also 
receives a designation of the network property value 
from the user. In step 813, the network property value 
addition function block 221 adds the user-designated 

15 network property value to the data, and sends the data 
2212 with the user-designated network property value 
to the data storage region 222 for storing the same. The 
data storage region 222 stores the data and the network 
property values added by the network property value ad- 

20 ditlon function block 221 . The access policy storage unit 

223 stores an access policy or a transmission policy for 
allowing a decision, based on the transmission policy, 
of the pennission of transmission of the data stored in 
the data storage region 222 to other data communica- 

25 tion tennlnals over the data communication networks. 
[0256] FIG. 38 is a flow chart of operations of the data 
transmission permission decision function block Includ- 
ed In the data communication terminal of FIG. 37. The 
processes or operations shown by the data transmis- 

30 slon pennission decision function block 224 are imple- 
mented by execution of the program from the storage 
medium 227. In steps S171 and S172, the data trans- 
mission pennission decision function block 224 is start- 
ed upon receipt of a data transmission request 2213. In 

35 step 8173, the data transmission permission decision 
function block 224 retrieves the transmission data from 
the data storage region 222 and obtains the network 
property value added to the retrieved transmission data 

2214. In step S174, the data transmission pennission 
40 decision function block 224 reads out the transmission 

policy 2215 from the access policy storage unit 223. In 
step 8175, the data transmission pennission decision 
function block 224 refers the network property value as- 
signed to the data communication network connected 

45 with one or more data communication tennlnals, to 
which the data transmission is intended to be made, and 
also refers the network property value assigned to the 
data communication network connected with the 
present data communication tennlnal 220, so that the 

50 data transmission pennission decision function block 

224 makes a decision on the permissibility of the data 
transmission based on the referred network property 
values. lnstepS176, Ifthe data transmission permission 
decision function block 224 decides that the data trans- 

55 mission is pemnitted based on the transmission policy 

2215, then In step 81 77 the data transmission permis- 
sion decision function block 224 transfers the transmis- 
sion data 2216 along with the network property value 
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added to the transmission data to the packet transmis- 
sion function block 225 for requesting the packet trans- 
mission function block 225 to transmit the data and the 
header with the network property value. A transmission 
data packet 221 7 Is transmitted by the packet transmis- 
sion function block 225 onto the data communication 
network assigned with the network property value of the 
data. If, however, the data transmission permission de- 
cision function block 224 decides that the data transmis- 
sion is not pennitted based on the transmission policy 
2215, then in step S178 the data transmission permis- 
sion decision function block 224 sends the data trans- 
mission permission decision request function block 226 
an information 221 8 to the effect that the data transmis- 
sion Is not permitted. In step S179, the data transmis- 
sion pemiission decision request function block 226 
sends user an information 221 9 to the effect that the da- 
ta transmission is not permitted. The data transmission 
pemiission decision request function block226 receives 
an user's instruction 2220. In step SI 80, if the user's 
instruction 2220 is to transmit the data, then the data 
transmission pennission decision request function block 
226 sends the data transmission pemnission decision 
function block 224 the received user's Instruction 2221 . 
In step SI 81 , the data transmission permission decision 
function block 224 further sends the access policy stor- 
age unit 223 an information 2222 to the effect that the 
data transmission is permitted. The access policy stor- 
age unit 223 makes a time-limited registration, on the 
transmission policy, of the information 2222 to the effect 
that the data transmission is permitted. In step SI 77, 
the data transmission permission decision function 
block 224 transfers the transmission data 2216 along 
with the network property value added to the transmis- 
sion data to the packet transmission function block 225 
for requesting the packet transmission function block 
225 to transmit the data and the header with the network 
property value. A transmission data packet 2217 is 
transmitted by the packet transmission function block 
225 onto the data communication network assigned with 
the network property value of the data. The difference 
of this embodiment from the fourteenth embodiment 
may also be applicable to the twelfth and thirteenth em- 
bodiments, so as to modify the data communication ter- 
minal of the twelfth and thirteenth embodiments in ac- 
cordance with this fifteenth embodiment. 

SIXTEENTH EMBODIMENT 

[0257] A sixteenth embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. The sixteenth embodiment is ap- 
plicable to the data communication system shown in 
FIG. 1 and described in the first embodiment. FIG. 39 is 
a block diagram of an internal structure of the data com- 
munication terminal of the sixteenth embodiment in ac- 
cordance with the present Invention, A data communi- 
cation temnina! 230 may Include a network property val- 



ue addition function block 231, a data storage region 
232, an access policy storage unit 233, a data transmis- 
sion pennission decision function block 234, a packet 
transmission function block 235, a data transmission 

5 permission decision operation inhibiting function block 
236 and a storage medium 237 for storing one or more 
programs to be executed by the above respective func- 
tion blocks. The storage medium 237 may be realized 
by any available storage means such as read only mem- 

10 ory or integrated circuit memory. 

[0258] In this embodiment, an additional provision of 
the data transmission permission decision operation in- 
hibiting function block 236 and a modification to the op- 
eration of the data transmission permission decision 

15 function block 234 are different from the first embodi- 
ment. The network property value addition function 
block 231 is provided for adding a user-designated net- 
work property value to data 2311 which have been en- 
tered by user of the data communication tenninal 230 

20 for allowing the data 2312 together with the added net- 
work property value to be stored in the data storage re- 
gion 232. The operations or processes of the network 
property value addition function block 231 may be im- 
plemented by execution of the program from the storage 

25 medium 237 which have been described in the second 
embodiment with reference to FIG. 8. In step S11 , the 
network property value addition function block 231 re- 
ceives an entry of the data from user with a request for 
storing the data into the data storage region 232. In step 

30 SI 2, the network property value addition function block 
231 also receives a designation 2318 of the network 
property value from the user. In step S13, the network 
property value addition function block 231 adds the us- 
er-designated network property value to the data, and 

35 sends the data 2312 with the user-designated network 
property value to the data storage region 232 for storing 
the same. The data storage region 232 stores the data 
and the network property values added by the networic 
property value addition function block 231 . The access 

40 policy storage unit 233 stores an access policy or a 
transmission policy for allowing a decision, based on the 
transmission policy, of the pennission of transmission of 
the data stored In the data storage region 232 to other 
data communication terminals over the data communi- 

45 cation networks. 

[0259] FIG. 40 is a flow chart of operations or proc- 
esses of the data transmission pennission decision op- 
eration inhibiting function block Included In the data 
communication tenninal of FIG. 39. The processes or 

50 operations shown by the data transmission permission 
decision operation inhibiting function block 236 are im- 
plemented by execution of the program from the storage 
medium 237. In step 8191, the data transmission per- 
mission decision operation inhibiting function block 236 

55 receives an user's instruction 2318 on whether opera- 
tion of the data transmission pemnission decision func- 
tion block 234 should be made valid or invalid. In step 
SI 92, If the user's instruction 2318 Is to make invalid 
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operation of the data transmission permission decision 
function blocl< 234, then in step S1 93 the data transmis- 
sion permission decision operation Inhibiting function 
blocl< 236 sends the data transmission permission de- 
cision function b\ock 234 an instruction 2319 that the 5 
data transmission permission decision function blocl< 
234 is not permitted to make any decision on the per- 
missibility 0 the data transmission based on the trans- 
mission policy 2315. The data transmission permission 
decision function blocl< 234, therefore, does not make 
any decision on the permissibility o the data transmis- 
sion based on the transmission policy 2315 even upon 
receipt of the user's data transmission request 2313. 
The data transmission permission decision function 
block 234 automatically transfers the transmission data 

231 6 along with the network property value added to the 
transmission data to the packet transmission function 
block 235 for requesting the packet transmission func- 
tion block 235 to transmit the data and the header with 
the network property value. A transmission data packet 

231 7 is transmitted by the packet transmission function 
block 235 onto the data communication network as- 
signed with the network property value of the data. In 
step SI 92, if the user's Instruction 231 8 is to make valid 
operation of the data transmission permission decision 
function block 234, then the data transmission permis- 
sion decision function block 234 refers the network prop- 
erty value assigned to the data communication network 
connected with one or more data communication termi- 
nals, to which the data transmission is intended to be 
made, and also refers the network property value as- 
signed to the data communication network connected 
with the present data communication terminal 230, so 
that the data transmission permission decision function 
block 234 makes a decision on the permissibility of the 
data transmission based on the referred network prop- 
erty values. Ifthe data transmission permission decision 
function block 234 makes a decision that the data trans- 
mission is permitted based on the transmission policy 
2315, then the data transmission permission decision 
function block 234 transfers the transmission data 231 6 
along with the network property value added to the 
transmission data to the packet transmission function 
block 235 for requesting the packet transmission func- 
tion block 235 to transmit the data and the header with 
the network property value. A transmission data packet 
2317 is transmitted by the packet transmission function 
block 235 onto the data communication network as- 
signed with the network property value of the data. The 
difference of this embodiment from the first embodiment 
may also be applicable to the second to fifteenth em- 
bodiments, so as to modify the data communication ter- 
minal of the second to fifteenth embodiments in accord- 
ance with this sixteenth embodiment. 

SEVENTEENTH EI\/IBODIMENT: 

[0260] A seventeenth embodiment according to the 



present invention will be described In detail with refer- 
ence to the drawings. The seventeenth embodiment is 
applicable to the data communication system shown in 
FIG. 1 and described in the first embodiment. The struc- 
ture of the data communication tennlnal of the seven- 
teenth embodiment is the same as the first embodiment 
shown in FIG. 2. A data communication terminal 1 may 
include a network property value addition function block 
11 , a data storage region 12, an access policy storage 
unit 13, a data transmission pemriission decision func- 
tion block 14, a packet transmission function block 15, 
and a storage medium 1 6 for storing one or more pro- 
grams to be executed by the above respective function 
blocks. The storage medium 1 6 may be realized by any 
available storage means such as read only memory or 
integrated circuit memory. 

[0261] In this embodiment, modifications to the re- 
spective operations of the data transmission permission 
decision function block 14 and the packet transmission 
function block 15 are different from the first embodiment. 
The network property value addition function block 11 Is 
provided for adding a user-designated network property 
value to data 111 which have been entered by user of 
the data communication terminal 1 for allowing the data 
112 together with the added network property value to 
be stored in the data storage region 12. The data stor- 
age region 1 2 stores the data and the network property 
values added by the network property value addition 
function block 11. The access policy storage unit 13 
stores an access policy or a transmission policy for al- 
lowing a decision, based on the transmission policy, of 
the permission of transmission of the data stored in the 
data storage region 1 2 to other data communication ter- 
minals over the data communication networks. 
[0262] FIG. 41 is a flow chart of operations of the data 
transmission permission decision function block includ- 
ed in the data communication terminal of FIG. 2. The 
processes or operations shown by the data transmis- 
sion pemnission decision function block 14 are Imple- 
mented by execution of the program from the storage 
medium 1 6 as shown in FIG. 5 and described in the first 
embodiment. In steps 8201 and 8202, the data trans- 
mission pemnission decision function block 1 4 is started 
upon receipt of a data transmission request 113. In step 
S203, the data transmission permission decision func- 
tion block 14 retrieves the transmission data from the 
data storage region 1 2 and obtains the network property 
value added to the retrieved transmission data 114. In 
step 8204, the data transmission pemilssion decision 
function block 1 4 reads out the transmission policy 115 
from the access policy storage unit 13. In step 8205, the 
data transmission pemnission decision function block 14 
refers the network property value assigned to the data 
communication network connected with one ormore da- 
ta communication temninals, to which the data transmis- 
sion is intended to be made, and also refers the network 
property value assigned to the data communication net- 
work connected with the present data communication 



15 



20 



25 



30 



35 



40 



45 



50 



33 



65 



EP 1 301 004 A2 



66 



terminal 1 , so that the data transmission permission de- 
cision function blocic 14 makes a decision on the per- 
missibility of the data transmission based on the referred 
network property values. In step S206, If the data trans- 
mission pennisslon decision function block 14 decides 
that the data transmission is pennltted based on the 
transmission policy, then in step S207 the data trans- 
mission permission decision function block 14 verifies 
whether the present data communication terminal 1 as 
"sender" Is connected to the data communication net- 
work having the same network property value as the da- 
ta communication network connected with any data 
communication terminal as "receiver", to which the data 
transmission is Intended to be made. If both the network 
property values are identical with each other, then In 
step S209 the data transmission pennission decision 
function block 14 transfers only the transmission data 

116 without the network property value added to the 
transmission data to the packet transmission function 
block 16 for requesting the packet transmission function 
block 1 5 to transmit the data and the header only without 
the network property value. A transmission data packet 

117 is transmitted by the packet transmission function 
block 15 onto the data communication network. FIG. 42 
Is a diagram of a structure of the transmission data pack- 
et free of the network property value involved in step 
S209 of FIG. 41 . The transmission data packet 117 in- 
cludes the header 11 and the data 12. If both the network 
property values are different from each other, then In 
step S208 the data transmission pennission decision 
function block 14 transfers the transmission data 116 
along with the network property value added to the 
transmission data to the packet transmission function 
block 1 5 for requesting the packet transmission function 
block 16 to transmit the data and the header with the 
network property value. A transmission data packet 1 1 7 
is transmitted by the packet transmission function block 
16 onto the data communication network. The differ- 
ence of this embodiment from the first embodiment may 
also be applicable to the second to sixteenth embodi- 
ments, so as to modify the data communication tenninal 
of the second to sixteenth embodiments in accordance 
with this seventeenth embodiment. 

EIGHTEENTH EMBODIIVIEIMT 

[0263] An eighteenth embodiment according to the 
present invention will be described. This embodiment Is 
different from the first embodiment only In that the net- 
work property values indicate two types of the networks, 
for example, first one is the private network, and the sec- 
ond one is the public network. The difference of this em- 
bodiment from the first embodiment may also be appli- 
cable to the second to seventeenth embodiments, so as 
to modify the data communication tenninal of the sec- 
ond to seventeenth embodiments In accordance with 
this eighteenth embodiment. 



NINETEENTH EMBODIMENT 

[0264] A nineteenth embodiment according to the 
present invention will be described. This embodiment is 

5 different from the first embodiment only In that the net- 
work property values are Identifiers which indicate re- 
spective organizations. The difference of this embodi- 
ment from the first embodiment may also be applicable 
to the second to eighteenth embodiments, so as to mod- 

10 Ify the data communication terminal of the second to 
eighteenth embodiments in accordance with this nine- 
teenth embodiment. 

TWENTIETH EMBODIMENT 

15 

[0265] A twentieth embodiment according to the 
present invention will be described. This embodiment is 
different from the first embodiment only in that the net- 
work property values indicate respective points of a hi- 

20 erarchical network structure. FIG. 43 Is a diagram of a 
typical example of the hierarchical network structure In- 
volved in the network property values in the twentieth 
embodiment in accordance with the present invention. 
Networks K1 -K8 are in thefonn of a hierarchical network 

25 structure, wherein the networks K1-K8 have network 
property values P1-P8 respectively, which Indicate re- 
spective points of the hierarchical network structure. 
[0266] FIG. 44 is a diagram of a typical example of a 
transmission policy suitable for the hierarchical network 

30 structure of FIG. 43. The transmission policy may in- 
clude tree entries J1 , J2 and J3. The entry J1 is that in 
case of transmission of data added with the network 
property value PI, if the present data communication 
terminal as "sender" is connected with the data commu- 

35 nication network assigned with a network property value 
which represents PI or upper level and further if the data 
communication terminal as "receiver", to which the data 
transmission is Intended to be made, is assigned with a 
networkproperty value which represents any lower level 

40 than P1 , then the data transmission is pennitted. The 
entry J2 is that in case of transmission of data added 
with the network property value P2, if the present data 
communication terminal as "sender" Is connected with 
the data communication network assigned with a net- 

45 work property value which represents just P2 and if the 
data communication terminal as "receiver", to which the 
data transmission is intended to be made, is assigned 
with a network property value which also represents just 
P2, then the data transmission Is permitted. The entry 

50 J3 is that In case of transmission of data added with the 
network property value P3, if the data communication 
terminal as "receiver", to which the data transmission is 
intended to be made, is assigned with a network prop- 
erty value which represents any higher level than P3, 

55 then the data transmission is pemnitted regardless of the 
network property value of the data communication net- 
work connected with the present data communication 
terminal as "sender". The difference of this embodiment 
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from the first embodiment may also be applicable to the 
second to seventeenth embodiments, so as to modify 
the data communication terminal of the second to sev- 
enteenth embodiments In accordance with this twenti- 
eth embodiment. 

TWENTY FIRST ElVIBQDIMENT: 

[0267] A twenty first embodiment according to the 
present invention will be described. This embodiment is 
different from the first embodiment only in that the net- 
worl< property values Include network-irrelative identifi- 
ers which do not specify the networl<s. The difference of 
this embodiment from the first embodiment may also be 
applicable to the second to twentieth embodiments, so 
as to modify the data commu nication terminal of the sec- 
ond to twentieth embodiments in accordance with this 
twenty first embodiment. 

TWENTY SECOND EISIBODIMENT: 

[0268] A twenty second embodiment according to the 
present invention will be described in detail with refer- 
ence to the drawings. FIG. 45 Is a block diagram of a 
data communication system in a twenty second embod- 
iment In accordance with the present invention. The da- 
ta communication system in accordance with the 
present invention may include a plurality of different data 
communication networks and a plurality of data commu- 
nication terminals. As one example, it will be assumed 
that the data communication system includes three dif- 
ferent data communication networks 2401 , 2402 and 
2403 and four data communication temninals 241 , 242, 
243 and 244. The data communication network 2401 Is 
assigned with a property value P1 and an Identifier ID1 . 
The data communication network 2402 is assigned with 
a property value P2 and an identifier ID2. The data com- 
munication network 2403 is assigned with a property 
value P3 and an identifier IDS. Those property values 
P1 , P2 and P3 may be either different from each other 
or Identical with each other. Those property values PI, 
P2 and P3 are Identifiers which identify the kinds of the 
networks. Those identifiers ID1 , ID2 and ID3 are unique 
and identify directly the data communication networks 
2401 , 2402, and 2403 respectively The data communi- 
cation terminals 241 , 242, 243 and 244 are given re- 
spective tenninal addresses which uniquely identify 
those terminals in the data communication system of 
FIG. 45, so as to make it possible that the network iden- 
tifiers of the respective networks connected with the ter- 
minal are available from the temilnal address. 
[0269] FIG. 46 is a block diagram of an internal struc- 
ture of the data communication terminal of the twenty 
second embodiment in accordance with the present In- 
vention. A data communication terminal 250 may in- 
clude a network property value addition function block 
251 , a data storage region 252, an access policy storage 
unit 253, a data transmission pemnisslon decision func- 



tion block 254, a packet transmission function block255, 
a packet receiving function block 256, a data receiving 
permission decision function block 257, a network prop- 
erty value table 258 and a storage medium 259 for stor- 

5 ing one or more programs to be executed by the above 
respective function blocks. The storage medium 259 
may be realized by any available storage means such 
as read only memory or Integrated circuit memory. 
[0270] In this embodiment, an additional provision of 

10 the network property value table 258 as well as modifi- 
cations to the respective operations of the data trans- 
mission permission decision function block 254 and the 
data receiving perniission decision function block 257 
are different from the third embodiment. The network 

15 property value addition function block 251 is provided 
for adding a determined network property value to data 
2511 which have been entered by user of the data com- 
munication terminal 250 for allowing the data 2512 to- 
gether with the added network property value to be 

20 stored In the data storage region 252. The data storage 
region 252 stores the data and the network property val- 
ues added by the network property value addition func- 
tion block 21 , The access policy storage unit 253 stores 
not only a transmission policy but also a receiving policy. 

25 The transmission policy allows a decision, based on the 
transmission policy, of the perniission of transmission of 
the data stored in the data storage region 252 to other 
data communication terminals over the data communi- 
cation networks. The receiving policy allows a decision, 

30 based on the receiving policy, of the penmission of re- 
ceipt of the data from other data communication temni- 
nals over the data communication networks. 
[0271] FIG. 47 is a diagram of a typical example of 
contents registered on the network property value table 

35 included in the data communication terminal of FIG. 46. 
The network property value table 258 includes three en- 
tries L1, L2 and L3, each of which stores a respective 
con'espondence of a network identifier and a network 
property value. The entry L1 stores a con-espondence 

40 of 101 and PI , The entry L2 stores a correspondence of 
ID2 and P2. The entry L3 stores a correspondence of 
ID3 and P3. 

[0272] FIG. 48 is a flow chart of operations of the data 
transmission permission decision function block includ- 
es ed in the data communication terminal of FIG. 46. The 
processes or operations shown by the data transmis- 
sion permission decision function block 254 are Imple- 
mented by execution of the program from the storage 
medium 259. In steps 821 1 and S212, the data trans- 
50 mission pennlssion decision function block 254 is start- 
ed upon receipt of a data transmission request 2513. In 
step 8213, the data transmission perniission decision 
function block254 obtains, from the received data trans- 
mission request 251 3, atemnlnal identifier which identi- 
55 fies a data communication terminal as "receiver", to 
which the data transmission is intended to be made. In 
step 8214, the data transmission perniission decision 
function block 254 also obtains a network Identifier 
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which identifies the data transmission network connect- 
ed with the data communication terminal as "receiver", 
to which the data transmission is Intended to be made. 
In step S21 5, the data transmission permission decision 
function block 254 retrieves the network property value 
table 258 and obtains the network property value as- 
signed to the data communication network connected 
with the data communication temriinal as "receiver", to 
which the data transmission is intended to be made. In 
step S216, the data transmission pemiisslon decision 
function block 2 54 further retrieves the transmission da- 
ta from the datastorage region 252 and obtains the net- 
work property value added to the retrieved transmission 
data 2514. In step S217, the data transmission permis- 
sion decision function block 254 reads out the transmis- 
sion policy 251 5 from the access policy storage unit 253. 
In step S21 8, the data transmission permission decision 
function block 254 refers the network property value as- 
signed to the data communication network connected 
with one or more data communication terminals, to 
which the data transmission is intended to be made, and 
also refers the network property value assigned to the 
data communication network connected with the 
present data communication tennlnal 250, so that the 
data transmission permission decision function block 
254 makes a decision on the pennissibility of the data 
transmission based on the referred network property 
values. lnstepS219, ifthe data transmission permission 
decision function block 254 decides that the data trans- 
mission is permitted based on the transmission policy, 
then in step S220 the data transmission permission de- 
cision function block 254 transfers the transmission data 
251 6 along with the network property value added to the 
transmission data to the packet transmission function 
block 255 for requesting the packet transmission func- 
tion block 256 to transmit the data and the header with 
the network property value. A transmission data packet 
2523 Is transmitted by the packet transmission function 
block 255 onto the data communication network as- 
signed with the network property value of the data, Ifthe 
data communication terminal as "sender'', from which 
the data are transmitted, is connected to plural data 
communication networks, the data transmission permis- 
sion decision function block 254 refers the network prop- 
erty value assigned to the data communication network, 
via which the data transmission is intended to be made. 
If the data communication terminal as "receiver", to 
which the data are transmitted, is connected to plural 
data communication networks, the data transmission 
permission decision function block 254 refers the net- 
work property value assigned to the data communica- 
tion network, via which the data transmission as "receiv- 
er" is intended to receive the transmitted data. 
[0273] FIG. 49 is a flow chart illustrative of a typical 
example of processes or operations shown by the data 
receiving pemnission decision function block included in 
the data communication temriinal of FIG. 46. The proc- 
esses or operations shown by the data receiving per- 



mission decision function block 257 are implemented by 
execution of the program from the storage medium 259. 
In step S221, the packet receiving function block 256 
receives a packet 251 8. In step S222, the packet receiv- 

5 ing function block 256 isolates a transmission control 
header, a network property value and the data from the 
received packet 2518. The packet receiving function 
block 256 sends a set 251 9 of the isolated transmission 
control header, the network property value and the data 

10 to the data receiving permission decision function block 
257. In step S223, the data receiving pemnission deci- 
sion function block 257 obtains, from the received trans- 
mission control header, a tenninal identifier which iden- 
tifies a data communication terminal as "sender", from 

15 which the data have been transmitted. In step S224, the 
data receiving permission decision function block 257 
also obtains a network identifier which identifies the data 
communication network connected with the data com- 
munication tennlnal as "sender", from which the data 

20 have been transmitted. In step S225, the data receiving 
permission decision function block 257 retrieves the net- 
work property value table 258 and obtains a network 
property value assigned to the data communication net- 
work connected with the data communication terminal 

25 as "sender", from which the data have been transmitted. 
In step S226, the data receiving permission decision 
function block 257 reads out the receiving policy 2520 
from the access policy storage unit 253. In step S227, 
the data receiving permission decision function block 

30 257 refers a network property value which is assigned 
to the data communication network connected with the 
"sender" data communication terminal, and also refers 
the network property value received from the packet re- 
ceiving function block 256, so that the data receiving 

35 permission decision function block 257 makes a deci- 
sion on the permissibility of the data receiving with ref- 
erence to the above both network property values. In 
step S228, if the data receiving permission decision 
function block 257 decides that the data receiving is per- 

40 mitted based on the receiving policy, then in step S229, 
the data receiving permission decision function block 
257 sends the received data 2521 together with the net- 
work property value of the received data to the data stor- 
age region 252. If the sender data communication ter- 

45 minal as "sender", from which the data are transmitted, 
is connected to plural data communication networks, the 
data transmission receiving decision function block 257 
refers the network property value assigned to the data 
communication network, via which the data transmis- 

50 sion was made, if the present data communication ter- 
minal as "receiver", to which the data were transmitted, 
is connected to plural data communication networks, the 
data transmission receiving decision function block 257 
refers the network property value assigned to the data 

55 communication network, via which the present data 
transmission as "receiver" receives the transmitted da- 
ta. The difference of this embodiment from the third em- 
bodiment may also be applicable to the first and second 
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embodiments and the fourth to twenty first embodi- 
ments, so as to modify the data communication termi- 
nals of the first and second embodiments and the fourth 
to twenty first embodiments in accordance with this 
twenty second embodiment. 

TWENTY THIRD EIV1B0DII\4ENT: 

[0274] A twenty third embodiment according to the 
present invention will be described. This embodiment Is 
different from the first embodiment only in that the data 
communication terminal 1 has one or more file system 
which serves as a data storage region. The difference 
of this embodiment from the first embodiment may also 
be applicable to the second to twenty second embodi- 
ments, so as to modify the data communication terminal 
of the second to twenty second embodiments in accord- 
ance with this twenty third embodiment. 

TWENTY FOURTH EMBODIMENT: 

[0275] A twenty fourth embodiment according to the 
present invention will be described. This embodiment Is 
different from the first embodiment only In that the data 
communication terminal 1 has one or more hard disk 
which serves as a data storage region. The difference 
of this embodiment from the first embodiment may also 
be applicable to the second to twenty second embodi- 
ments, so as to modify the data communication terminal 
of the second to twenty second embodiments in accord- 
ance with this twenty fourth embodiment. 
[0276] Although the invention has been described 
above in connection with several preferred embodi- 
ments therefor, it will be appreciated that those embod- 
iments have been provided solely for illustrating the in- 
vention, and not in a limiting sense. Numerous modifi- 
cations and substitutions of equivalent materials and 
techniques will be readily apparent to those skilled in the 
art after reading the present application, and all such 
modifications and substitutions are expressly under- 
stood to fall within the true scope and spirit of the ap- 
pended claims. 



Claims 

1 . A data communication system including : 

a plurality of network ; and 

a plurality of terminal being accessible to said 

plurality of network, 

characterized in that each of said plurality of 
network is assigned with each network property val- 
ue, and 

each of said plurality of terminal further 
includes : at least an access policy for making a de- 
cision on pemnlsslbllity for access to other temilna! 



of said plurality of tennlna! than said each terminal, 
with reference to at least one of a first network prop- 
erty value assigned to a first network connected 
with said each terminal and a second network prop- 
5 erty value assigned to a second network connected 
with said other tenninal, so that only when said ac- 
cess is pemnltted based on said access policy, then 
said temilnal makes an access to said other termi- 
nal. 

10 

2. The system as claimed In claim 1 , characterized 
in that said first and second network property val- 
ues are either identical with or different each other, 
and said first and second networks are also either 

15 identical with or different each other 

3. The system as claimed in claim 1 , characterized 
in that said at least an access policy includes at 
least a transmission policy for making a decision on 

20 pemnlssibility for data transmission to said other ter- 
minal, with reference to at least one of said first and 
second network property values, so that only when 
said data transmission is pemiitted based on said 
transmission policy, then said terminal makes said 

25 data transmission to said other terminal. 

4. The system as claimed In claim 3, characterized 
in that said temninal is adjusted that a data-accom- 
panying network property value Is added to data en- 

30 tered by user before said data accompanied with 
said data-accompanying network property value 
are stored in at least a data storage region of said 
terminal, to make said decision on pemnissibility for 
data transmission based on said at least a trans- 

35 mission policy with reference to said first and sec- 
ond network property values and said data-accom- 
panying network property value, so that only when 
said data transmission is pennltted based on said 
transmission policy, then said temainal makes a 

40 transmission of said data accompanied with said 
data-accompanying network property value to said 
other terminal. 

5. The system as claimed in claim 4, characterized 
45 In that said terminal Is adjusted to allow user to set 

said data-accompanying network property value to 
be added to said entered data every time when said 
entered data are stored In said at least a data stor- 
age region. 

50 

6. The system as claimed in claim 4, characterized 
In that said terminal is adjusted to set and change 
said data-accompanying network property value 
stored In said at least a data storage region. 

55 

7. The system as claimed in claim 3, characterized 
. in that said terminal is adjusted to change said ac- 
cess policy. 
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8. The system as claimed in claim 3, characterized 
in that said at least an access policy further in- 
cludes, in addition to said at ieast a transmission 
policy, at least a receiving policy for mal<ing a deci- 
sion on pemilssibility for data receiving from said 
other terminal, with reference to at least one of said 
first and second networl< property values, so that 
only when said data receiving is permitted based on 
said receiving policy, then said tennlnal makes said 
data receiving from said other temriinal. 

9. The system as claimed in claim 8, characterized 
in that said terminal is adjusted that a data-accom- 
panying network property value is added to data en- 
tered by user before said data accompanied with 
said data-accompanying network property value 
are stored in at least a data storage region of said 
terminal, to make said decision on pennissibillty for 
at least one of data transmission and data receiving, 
based on at least one of said at least a transmission 
policy and said at least a receiving policy, with ref- 
erence to said first and second network property 
values and said data-accompanying network prop- 
erty value, so that only when said data transmission 
is permitted based on said transmission policy, then 
said tenninal makes a transmission of said data ac- 
companied with said data-accompanying network 
property value to said other terminal, as well as only 
when said data receiving is permitted based on said 
receiving policy, then said terminal makes a receipt 
of said data accompanied with said data-accompa- 
nying network property value from said other termi- 
nal. 

10. The system as claimed in claim 9, characterized 
in that said terminal is adjusted to allow an user's 
instruction to set said data-accompanying network 
property value to be added to said entered data eve- 
ry time when said entered data are stored in said at 
least a data storage region. 

11. The system as claimed in claim 4, characterized 
in that said temiinal Is adjusted to set and change 
said data-accompanying network property value 
stored in said at least a data storage region. 

12. The system as claimed in claim 8, characterized 
in that said terminal is adjusted to change said re- 
ceiving policy. 

13. The system as claimed in claim 3, characterized 
in that said at least a data storage region comprises 
a plurality of data storage region, each of which is 
assigned with a storage-region-accompanying net- 
work property value, to make said decision on per- 
missibility for data transmission based on said at 
least a transmission policy with reference to said 
first and second network property values and said 



storage-region-accompanying network property 
value, so that only when said data transmission is 
pemnitted based on said transmission policy, then 
said terminal makes a transmission of said data ac- 
5 companied with said storage-region-accompanying 
network property value to said other tenninal. 

14. The system as claimed in claim 13, characterized 
in that said terminal is adjusted to set and change 

10 said storage-region-accompanying network prop- 
erty value stored in said at least a data storage re- 
gion. 

15. The system as claimed in claim 13, characterized 
15 in that said terminal is adjusted to change said 

transmission policy. 

16. The system as claimed In claim 8, characterized 
in that said at least a data storage region comprises 

20 a plurality of data storage region, each of which is 
assigned with a storage-region-accompanying net- 
work property value, to make said decision on per- 
missibility for at least one of data transmission and 
data receiving, based on at least one of said at least 

25 a transmission policy and said at least a receiving 
policy, with reference to said first and second net- 
work property values and said storage-region -ac- 
companying network property value, so that only 
when said data transmission Is permitted based on 

30 said transmission policy, then said tenninal makes 
a transmission of said data accompanied with said 
storage-region-accompanying network property 
value to said other terminal, as well as only when 
said data receiving is pemnitted based on said re- 

35 ceiving policy, then said terminal makes a receipt of 
said data from said other tenninal. 

17. The system as claimed In claim 16, characterized 
in that said terminal is adjusted to set and change 

40 said storage-region-accompanying network prop- 
erty value stored in each of said plurality of data 
storage region. 

18. The system as claimed in claim 16, characterized 
45 in that said tenninal is adjusted to change said re- 
ceiving policy. 

19. The system as claimed in claim 16, characterized 
in that said terminal is adjusted that one of said plu- 

50 rality of data storage region is selected In accord- 
ance with an user's designation for allowing said se- 
lected one of said plurality of data storage region to 
store said received data. 

55 20. The system as claimed in claim 16, characterized 
In that said tenninal is adjusted to infonn user that 
said data receiving Is not permitted based on said 
receiving policy. 
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21. The system as claimed in claim 8, characterized 
in that said terminal is adjusted to inform user that 
said data receiving is not pemiltted based on said 
receiving policy. 

22. The system as claimed in claim 16, characterized 
in that said terminal is adjusted that If said data re- 
ceiving is not permitted based on said receiving pol- 
icy, then said decision on permissibility of data re- 
ceiving is made In accordance with an user's In- 
struction, 

23. The system as claimed in claim 8, characterized 
In that said terminal is adjusted that if said data re- 
ceiving is not permitted based on said receiving pol- 
icy, then said decision on permissibility of data re- 
ceiving is made In accordance with an user's in- 
struction, 

24. The system as claimed In claim 23, characterized 
in that said terminal is adjusted that If said user's 
instruction is to pemnit storing said received data, 
then a temporary pennlsslon for receiving data Is 
added to said receiving policy in a predetermined 
time period. 

25. The system as claimed In claim 16, characterized 
in that said terminal Is adjusted that if said data re- 
ceiving is permitted based on said receiving policy 
but said plurality of data storage region does not in- 
clude any data storage region assigned with the 
same networi< property value as a networl< property 
value added to said received data, then a decision 
on pemnlssibility for storing said received data into 
any one of said plurality of data storage region Is 
made In accordance with an user's Instruction. 

26. The system as claimed in claim 25, characterized 
in that If said user's instruction Is to permit storing 
said received data, then a selection of one of said 
plurality of data storing regions for storing said re- 
ceived data Is made In accordance with an user's 
instruction. 

27. The system as claimed In claim 25, characterized 
In that said terminal is adjusted that if said user's 
Instruction Is to permit storing said received data, 
then a temporary permission for receiving data is 
added to said receiving policy in a predetermined 
time period. 

28. The system as claimed in claim 3, characterized 
In that said temainal Is adjusted to inform user that 
said data transmission is not permitted based on 
said transmission policy. 

29. The system as claimed in claim 3, characterized 
in that said terminal is adjusted that if said data 



transmission is not pemnitted based on said trans- 
mission policy, then said decision on permissibility 
of data transmission is made in accordance with an 
user's Instruction. 

5 

30. The system as claimed in claim 29, characterized 
in that said terminal is adjusted that if said user's 
Instruction Is to permit transmitting said data, then 
a temporary permission for transmitting data is add- 

10 ed to said transmission policy in a predetemriined 
time period. 

31. The system as claimed in claim 1, characterized 
in that said terminal is adjusted to allow an entered 

15 user's instruction to mai<e Invalid said decision on 
permissibility for access based on said access pol- 
icy. 

32. The system as claimed In claim 4, characterized 
20 in that said terminal Is adjusted that if said each 

temninal Is connected to a network assigned with 
the same network property value as of said other 
tenninal, then said data only are transmitted to said 
other tennlnal without being accompanied said da- 
25 ta-accompanying network property value. 

33. The system as claimed in claim 1, characterized 
in that said network property value includes identi- 
fiers which identify a private network and a public 

30 network respectively. 

34. The system as claimed in claim 1, characterized 
in that said network property value includes Identi- 
fiers which identify different organizations respec- 

35 tiveiy. 

35. The system as claimed in claim 1 , characterized 
in that said network properly value includes identi- 
fiers which identify respective node points included 

40 in a hierarchical network structure. 

36. The system as claimed in claim 1, characterized 
in that said network property value includes identi- 
fiers which do not identify any network. 

45 

37. The system as claimed In claim 1, characterized 
in that each of said plurality of network is assigned 
with each network identifier which uniquely identi- 
fies said each network, and said each terminal Is 

50 adjusted to specify said otherterminal, to which said 
each temninal makes an access, based on a termi- 
nal address which includes said each network Iden- 
tifier. 

55 38. The system as claimed in claim 37, characterized 
in that said terminal is adjusted to hold respective 
correspondence between said each network iden- 
tifier and said each network property value as- 
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signed to a network which is also assigned to said 
each network identifier for obtaining a network Iden- 
tifier assigned to a network connected to said other 
terminal, to which said each terminal makes an ac- 
cess, based on atemriinal address of said other ter- 
minal, to specify a corresponding network property 
value to said obtained network Identifier. 

39. The system as claimed in claim 1 , characterized 
in tiiat said terminal includes at least one file sys- 
tem which provides an additional data storage re- 
gion. 

40. The system as claimed In claim 1 , characterized 
in that said terminal Includes at least one hard disk 
which provides an additional data storage region. 

41. A tenninal accessible though a plurality of network 
assigned with each network property value to other 
terminal for data communication, characterized in 
that said tenninal includes : 

an access policy storing unit for storing at least 
an access policy ; and 

an access permission decision function block 
for making a decision on pennissibiilty for ac- 
cess to said other terminal, with reference to at 
least one of a first network property value as- 
signed to a first network connected with said 
temnlnal and a second network property value 
assigned to a second network connected with 
said other terminal, so that only when said ac- 
cess Is pennltted based on said access policy, 
then saidtemrilnal makes an access to said oth- 
er terminal. 

42. The terminal as claimed In claim 41 , characterized 
in that said first and second network property val- 
ues are either identical with or different each other, 
and said first and second networks are also either 
identical with or different each other. 

43. The temnlnal as claimed In claim 41 , characterized 

in that said at least an access policy Includes at 
least a transmission policy, and said access permis- 
sion decision function block includes a data trans- 
mission pennission decision function block which 
makes a decision on permissibility for data trans- 
mission to said other terminal, with reference to at 
least one of said first and second network property 
values, so that only when said data transmission is 
permitted based on said transmission policy, then 
said terminal makes said data transmission to said 
other terminal. 

44. The tenninal as claimed In claim 43, characterized 
by further including : 



a network property value adding function block 
for adding a data-accompanying network prop- 
erty value to data entered by user ; and 
at least a data storage region for storing said 

5 data accompanied with said data-accompany- 

ing network property value, and 
wherein said data transmission pennission de- 
cision function block makes said decision on 
pennlssibility for data transmission based on 

10 said at least a transmission policy stored In said 

access policy storing unit with reference to said 
first and second network property values and 
said data-accompanying network property val- 
ue, so that only when said data transmission is 

15 pemriitted based on said transmission policy, 

then said terminal makes a transmission of said 
data accompanied with said data-accompany- 
ing network property value to said other tennl- 
nai. 

20 

45. The tenninal as claimed in claim 44, characterized 
in that said network property value adding function 
block Is adjusted to allow user to set said data-ac- 
companying network property value to be added to 

25 said entered data every time when said entered da- 
ta are stored in said at least a data storage region. 

46. The tenninal as claimed In claim 44, characterized 
by further Including a network property value 

30 changing function block for setting and changing 
said data-accompanying network property value 
stored in said at least a data storage region. 

47. The tenninal as claimed In claim 41 , characterized 
35 by further Including an access policy changing func- 
tion block for changing said access policy stored In 
said access policy storing unit. 

48. The tenninal as claimed In claim 43, characterized 

40 by further including a data receiving pennission de- 
cision function block, and 

wherein said access policy storing unit further 
stores. In addition to said transmission policy, at 
least a receiving policy, for allowing said data re- 

45 ceiving pennission decision function block to make 
a decision on permissibility for data receiving from 
said other terminal, with reference to at least one of 
said first and second network property values, so 
that only when said data receiving Is pemnitted 

so based on said receiving policy, then said terminal 
makes said data receiving from said other terminal. 

49. The terminal as claimed In claim 48, characterized 
in that said network property value adding function 

55 block is adjusted to add a data-accompanying net- 
work property value to data entered by user before 
said at least a data storage region stores said data 
accompanied with said data-accompanying net- 
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work property value, to allow at least one of said 
data transmission permission decision function 
block and said data receiving permission decision 
function block to make said decision on permissibil- 
ity for at least one of data transmission and data 
receiving, based on at least one of said at least a 
transmission policy and said at least a receiving pol- 
icy, with reference to said first and second network 
property values and said data-accompanying net- 
work property value, so that only when said data 
transmission is pemnitted based on said transmis- 
sion policy, then said terminal makes a transmission 
of said data accompanied with said data-accompa- 
nying n^two^k property value to said other terminal, 
as well as only when said data receiving Is pemiitted 
based on said receiving policy, then said terminal 
makes a receipt of said data accompanied with said 
data-accompanying network property value from 
said other terminal. 

50. Thetenninal as claimed in claim 49, characterized 
in that said network property value adding function 
block is adjusted to allow an user's instruction to set 
said data-accompanying network property value to 
be added to said entered data every time when said 
entered data are stored in said at least a data stor- 
age region. 

51 . The terminal as claimed in claim 44, characterized 
by further including an network property value 

changing function block for setting and changing 
said data-accompanying network property value 
stored in said at least a data storage region. 

52. The tennlnal as claimed in claim 48, characterized 

by further including an access policy changingfunc- 
tlon block for changing at least one of said trans- 
mission policy and said receiving policy. 

53. The temninal as claimed in claim 43, characterized 
in that said at least a data storage region comprises 
a plurality of data storage region, each of which is 
assigned with a storage-region-accompanying net- 
work property value, to allow said data transmission 
permission decision function block to make said de- 
cision on permissibility for data transmission based 
on said at least a transmission policy with reference 
to said first and second network property values and 
said storage-region-accompanying network prop- 
erty value, so that only when said data transmission 
Is permitted based on said transmission policy, then 
said tenninal makes a transmission of said data ac- 
companied with said storage-region-accompanying 
network property value to said other terminal. 

54. The tenninal as claimed in claim 63, characterized 
by further including a network property value 
changing function block for setting and changing 



said storage-region-accompanying network prop- 
erty value stored in said at least a data storage re- 
gion, 

5 55. The terminal as claimed In claim 53, characterized 

by further including an access policy changing func- 
tion block for changing said transmission policy. 

56. The tenninal as claimed in claim 48, characterized 
10 in that said at least a data storage region comprises 

a plurality of data storage region, each of which is 
assigned with a storage-region-accompanying net- 
work property value, to allow at least one of said 
data transmission pemiission decision function 

IS block and said data receiving pennisston decision 
function block to make said decision on permissibil- 
ity for at least one of data transmission and data 
receiving, based on at least one of said at least a 
transmission policy and said at least a receiving pol- 

20 icy, with reference to said first and second network 
property values and said storage-region-accompa- 
nying network property value, so that only when 
said data transmission is permitted based on said 
transmission policy, then said tenninal makes a 

25 transmission of said data accompanied with said 
storage-region-accompanying network property 
value to said other terminal, as well as only when 
said data receiving is permitted based on said re- 
ceiving policy, then said terminal makes a receipt of 

30 said data from said other tenninal. 

57. The tenninal as claimed In claim 56, characterized 
by further including a network property value 
changing function block for setting and changing 

35 said storage-region-accompanying network prop- 
erty value stored in each of said plurality of data 
storage region. 

58. The tenninal as claimed in claim 56, characterized 
40 by further including an access policy changing func- 
tion block for changing said receiving policy. 

59. The terminal as claimed in claim 56, characterized 
by further including a data storage region selecting 

45 function block for selecting one of said plurality of 
data storage region in accordance with an user's 
designation for allowing said selected one of said 
plurality of data storage region to store said re- 
ceived data. 

so 

60. The tennlna! as claimed in claim 56, characterized 
by further including an aiann function block for in- 
forming user that said data receiving is not pennlt- 
ted based on said receiving policy. 

55 

61. The tenninal as claimed in claim 48, characterized 
by further including an alamn function block for in- 
fomnlng user that said data receiving is not pennlt- 
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ted based on said receiving policy. 

62. Tlietenninal as claimed in claim 56, characterized 

by further including a data receiving pemnisslon de- 
cision request function block which Is adjusted that 
If said data receiving Is not permitted based on said 
receiving policy, then said decision on pemnisstbility 
of data receiving is made in accordance with an us- 
er's instruction, 

63. Thetemnlnal as claimed in claim 48, characterized 
by further Including a data receiving pemnlssion de- 
cision request function block which is adjusted that 
If said data receiving is not pennitted based on said 
receiving policy, then said decision on pennisslbility 
of data receiving is made in accordance with an us- 
er's Instruction. 

64. The terminal as claimed in claim 63, characterized 
in that said data receiving pennisslon decision re- 
quest function block Is adjusted that if said user's 
Instruction is to pemnit storing said received data, 
then a temporary permission for receiving data is 
added to said receiving policy in a predetermined 
time period. 

65. Thetemnlnal as claimed in claim 56, characterized 
by further including a data storage region selecting 
function block for making a decision on permissibil- 
ity for storing said received data into any one of said 
plurality of data storage region in accordance with 
an user's instruction, If said data receiving Is per- 
mitted based on said receiving policy but said plu- 
rality of data storage region does not include any 
data storage region assigned with the same net- 
work property value as a network property value 
added to said received data. 

66. The terminal as claimed in claim 65, characterized 
in that if said user's instruction is to permit storing 
said received data, then said data storage region 
selecting function block selects one of said plurality 
of data storing regions for storing said received data 
Is made In accordance with an user's Instruction. 

67. The terminal as claimed in claim 65, characterized 

by further including a data receiving pemnisslon de- 
cision request function block adds a temporary per- 
mission for receiving data to said receiving policy In 
a predetemnined time period If said user's instruc- 
tion is to pennit storing said received data. 

68. The terminal as claimed in claim 43, characterized 
by further Including an alann function block for in- 
forming user that said data transmission is not per- 
mitted based on said transmission policy 

69. The terminal as claimed in claim 43, characterized 



by further Including a data transmission permission 
decision request function block for making said de- 
cision on pemiissibllity of data transmission in ac- 
cordance with an user's instruction, if said data 
5 transmission is not pennitted based on said trans- 
mission policy. 

70. The temninal as claimed in claim 69, characterized 
in that said data transmission permission decision 
10 requestfunctionblockadds a temporary pennission 
for transmitting data to said transmission policy in 
a predetermined time period, if said user's instruc- 
tion is to pennit transmitting said data. 

15 71 . The tenninal as claimed In claim 41 , characterized 

by further Including an access permission decision 
operation inhibitingfunctionblockfor making Invalid 
said decision on pemnissibillty for access based on 
said access policy In accordance with an entered 
20 user's instruction. 

72. The tenninal as claimed in claim 41 , characterized 
by further including a network property value table 
for holding respective correspondence between 

25 each network identifier and each network property 
value assigned to a network which is also assigned 
to said each network identifier for said access per- 
mission decision function block to obtain a network 
identifier assigned to a network connected to said 

30 other terminal, to which said each temrtinal makes 
an access, based on a terminal address of said oth- 
er terminal, to specify a corresponding network 
property value to said obtained network identifier. 

35 73. The terminal as claimed in claim 41 , characterized 
in that said terminal Includes at least one file tenni- 
nal which provides an additional data storage re- 
gion. 

40 74. The tenninal as claimed in claim 41 , characterized 
in that said tenninal includes at least one hard disk 
which provides an additional data storage region. 

75. A method for data communication between a plu- 
45 rality of terminal being accessible through a plurality 
of network, characterized in that said method 
includes : 

assigning each network property value to each 

50 of said plurality of network; 

setting at least an access policy ; 
making a decision on pennisslbility for access 
from a tenninal to other tenninal of said plurality 
of terminal, with reference to at least one of a 

55 first network property value assigned to a first 

networi< connected with said each tenninal and 
a second network property value assigned to a 
second network connected with said other 
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terminal ; and 

making an access to said other terminal only 
when said access Is pemiitted based on said 
access policy. 

76. The method as claimed in claim 75, characterized 
in that said first and second network property val- 
ues are either Identical with or different each other, 
and said first and second networks are also either 
Identical with or different each other. 

77. The method as claimed in claim 75, characterized 
in that said at least an access policy Includes at 
least a transmission policy for making a decision on 
permissibility for data transmission to said other ter- 
minal, with reference to at least one of said first and 
second network property values, so that only when 
said data transmission Is permitted based on said 
transmission policy, then said terminal makes said 
data transmission to said other tennlnal. 

78. The method as claimed in claim 77, characterized 
in that a data-accompanying network property val- 
ue Is added to data entered by user before said data 
accompanied with said data-accompanying net- 
work property value are stored in at least a data 
storage region of said terminal, to make said deci- 
sion on permissibility for data transmission based 
on said at least a transmission policy with reference 
to said fi rst and second network property values and 
said data-accompanying network property value, 
so that only when said data transmission is pennit- 
ted based on said transmission policy, then said ter- 
minal makes a transmission of said data accompa- 
nied with said data-accompanying network property 
value to said other terminal. 

79. The method as claimed In claim 78, characterized 

by further Including : allowing user to set said data- 
accompanying network property value to be added 
to said entered data every time when said entered 
data are stored in said at least a data storage re- 
gion. 

80. The method as claimed In claim 78, characterized 

by further including : setting and changing said da- 
ta-accompanying network property value stored in 
said at least a data storage region. 

81. The method as claimed In claim 77, characterized 
by further including : changing said access policy. 

82. The method as claimed In claim 77, characterized 

in that said at least an access policy further in- 
cludes, in addition to said at least a transmission 
policy, at least a receiving policy for making a deci- 
sion on pennlsslbillty for data receiving from said 
other terminal, with reference to at least one of said 



first and second network property values, so that 
only when said data receiving is permitted based on 
said receiving policy, then said tenninal makes said 
data receiving from said other tenninal. 

5 

83. The method as claimed in claim 82, characterized 
In that a data-accompanying network property val- 
ue is added to data entered by user before said data 
accompanied with said data-accompanying net- 

10 work property value are stored In at least a data 
storage region of said tenninal, to make said deci- 
sion on permissibility for at least one of data trans- 
mission and data receiving, based on at least one 
of said at least a transmission policy and said at 
IS least a receiving policy, with reference to said first 
and second network property values and said data- 
accompanying network property value, so that only 
when said data transmission is pennltted based on 
said transmission policy, then said terminal makes 
20 a transmission of said data accompanied with said 
data-accompanying network property value to said 
other tenninal, as well as only when said data re- 
ceiving Is permitted based on said receiving policy, 
then said temnlnal makes a receipt of said data ac- 
25 companied with said data-accompanying network 
property value from said other tenninal. 

84. The method as claimed In claim 83, characterized 
by further including : allowing an user's instruction 

30 to set said data-accompanying network property 

value to be added to said entered data every time 
when said entered data are stored In said at least a 
data storage region. 

35 85. The method as claimed in claim 78, characterized 

by further Including : setting and changing said da- 
ta-accompanying network property value stored in 
said at least a data storage region. 

40 86. The method as claimed in claim 82, characterized 
by further Including : changing said receiving policy. 

87. The method as claimed in claim 77, characterized 
by further including : assigning each storage-re- 

45 glon-accompanying network property value a plu- 
rality of data storage region, to make said decision 
on permissibility for data transmission based on 
said at least a transmission policy with reference to 
said first and second network property values and 
50 said storage-region-accompanying network prop- 
erty value, so that only when said data transmission 
is pemnitted based on said transmission policy, then 
said terminal makes a transmission of said data ac- 
companied with said storage-region-accompanying 
55 network property value to said other tenninal. 

88. The method as claimed in claim 87, characterized 
by further including : setting and changing said stor- 
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age-region-accompanylng network property value 
stored in said at least a data storage region. 

89. The method as cialnned in claim 87, characterized 
by further Including : changing said transmission 
policy. 

90. The method as claimed in claim 82, characterized 

by further including : assigning each storage-re- 
gion-accompanying network property value to each 
of a plurality of data storage region, to make said 
decision on permissibility for at least one of data 
transmission and data receiving, based on at least 
one of said at least a transmission policy and said 
at least a receiving policy, with reference to said first 
and second network property values and said stor- 
age-region-accompanying network property value, 
so that only when said data transmission is permit- 
ted based on said transmission policy, then said ter- 
minal makes a transmission of said data accompa- 
nied with said storage-region-accompanying net- 
work property value to said other terminal, as well 
as only when said data receiving is pemnitted based 
on said receiving policy, then said terminal makes 
a receipt of said data from said other temninal. 

91. The method as claimed in claim 90, characterized 
by further including : setting and changing said stor- 
age-region-accompanying network property value 
stored In each of said plurality of data storage re- 
gion. 

92. The method as claimed in claim 90, characterized 
by further including : changing said receiving policy. 

93. The method as claimed in claim 90, characterized 
in that one of said plurality of data storage region 
is selected In accordance with an user's designation 

for allowing said selected one of said plurality of da- 
ta storage region to store said received data. 

94. The method as claimed in claim 90, characterized 
by further including : infomiing user that said data 
receiving is not pemnitted based on said receiving 
policy. 

95. The method as claimed In claim 82, characterized 
by further including : Infomiing user that said data 
receiving is not pemnitted based on said receiving 
policy. 

96. The method as claimed in claim 90, characterized 
in that if said data receiving Is not permitted based 

on said receiving policy, then said decision on per- 
missibility of data receiving is made in accordance 
with an user's instruction. 

97. The method as claimed in claim 82, characterized 



In that if said data receiving is not pennitted based 
on said receiving policy, then said decision on per- 
missibility of data receiving is made in accordance 
with an user's instruction. 

5 

98. The method as claimed in claim 97, characterized 
in that if said user's instruction Is to pemiit storing 
said received data, then a temporary permission for 
receiving data is added to said receiving policy in a 

10 predetemiined time period. 

99. The method as claimed in claim 90, characterized 
in that if said data receiving is pennitted based on 
said receiving policy but said plurality of data stor- 
es age region does not include any data storage region 

assigned with the same network property value as 
a network property value added to said received da- 
ta, then a decision on pemnlssibility for storing said 
received data into any one of said plurality of data 
20 storage region Is made In accordance with an user's 
instruction. 

100. The method as claimed in claim 99, characterized 
in that if said user's instruction is to pemiit storing 

25 said received data, then a selection of one of said 
plurality of data storing regions for storing said re- 
ceived data Is made In accordance with an user's 
instruction. 

30 1 01 .The method as claimed In claim 99, characterized 
in that if said user's instruction is to permit storing 
said received data, then a temporary permission for 
receiving data is added to said receiving policy in a 
predetemiined time period. 

35 

102. The method as claimed in claim 77, characterized 
by further including : infomiing user that said data 
transmission is not pennitted based on said trans- 
mission policy. 

40 

103. The method as claimed in claim 77, characterized 
in that if said data transmission is not permitted 
based on said transmission policy, then said deci- 
sion on permissibility of data transmission is made 

45 in accordance with an user's instruction. 

104. The method as claimed in claim 103, character- 
ized In that If said user's instruction is to permit 
transmitting said data, then a temporary permission 

50 for transmitting data is added to said transmission 
policy in a predetermined time period. 

105. The method as claimed in claim 75. characterized 
by further including : allowing an entered user's in- 

55 struction to make invalid said decision on permissi- 
bility for access based on said access policy. 

lOe.The method as claimed in claim 78, characterized 
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in that if said each terminal Is connected to a net- 
work assigned with the same network property val- 
ue as of said other terminal, then said data only are 
transmitted to said other terminal without being ac- 
companied said data-accompanying network prop- s 
erty value. 

107. The method as claimed in claim 75, characterized 
in that said network property value includes Identi- 
fiers which Identify a private network and a public io 
network respectively. 

108. The method as claimed in claim 75, characterized 
in that said network property value includes identi- 
fiers which Identify different organizations respec- 
tlvely. 

109. The method as claimed in claim 75, characterized 
in that said network property value includes identi- 
fiers which Identify respective node points Included 20 
in a hierarchical network structure. 

HO.The method as claimed In claim 75, characterized 
in that said network property value includes Identi- 
fiers which do not Identify any network. 25 

111 .The method as claimed In claim 75, characterized 
in that each of said plurality of network is assigned 
with each network identifier which uniquely identi- 
fies said each network, to specify said other termi- 30 
nal, to which said each terminal makes an access, 
based on a terminal address which Includes said 
each network identifier. 

1 1 2The method as claimed In claim 111, characterized 35 

by further including : holding respective corre- 
spondence between said each network Identifier 
and said each network property value assigned to 
a network which Is also assigned to said each net- 
work identifier for obtaining a network Identifier as- 40 
signed to a network connected to said other termi- 
nal, to which said each terminal makes an access, 
based on a temnlnal address of said other temninal, 
to specify a corresponding network property value 
to said obtained network Identifier. ^5 
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